CVE-2012-0767

Adobe Flash Player contains a Cross‑Site Scripting (XSS) vulnerability (UXSS) tracked as CVE-2012-0767. The public description specifies that remote attackers could inject arbitrary script or HTML via unspecified vectors. Affected versions include Flash Player before 10.3.183.15 and 11.x before 1...

http://www.adobe.com/support/security/bulletins/apsb12-03.html

Security update available for Adobe Flash Player Release date: February 15, 2012 Vulnerability identifier: APSB12-03 CVE number: CVE-2012-0751, CVE-2012-0752, CVE-2012-0753, CVE-2012-0754, CVE-2012-0755, CVE-2012-0756, CVE-2012-0767 Platform: All Platforms SUMMARY This update addresses critical...

VulnCheck KEV: CVE-2012-0767

Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML...

CVE-2011-0767

The CVE-2011-0767 vulnerability affects Imperva SecureSphere Web Application Firewall, specifically the management GUI in MX Management Server across versions 6.2, 7.x, and 8.x. Root cause: improper validation/sanitization of user-controlled input stored and later returned to the administrator in...

Imperva SecureSphere management GUI contains an XSS vulnerability

Overview An XSS vulnerability exists in the Imperva SecureSphere management GUI. Description Dell SecureWorks' SWRX-2011-001 advisory states:"A vulnerability exists in Imperva SecureSphere due to improper validation of user-controlled input. User-controllable input is not properly sanitized for...

CVE-2009-0767

CVE-2009-0767 affects Kipper 2.01, where sensitive information is stored under the web root with insufficient access control. This allows remote attackers to download a file containing credentials via a direct request for job/config.data. Impact is exposure of credentials (partial confidentiality...

CVE-2009-0767

creationtimestamp| type| source ---|---|--- 2009-02-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7993...

CVE-2008-0767

CVE-2008-0767 affects ExtremeZ-IP File and Print Server (ExtremeZ-IP.exe) prior to or including 5.1.2x15. The issue is that the implementation does not verify that the field indicating the number of URLs is consistent with the packet length in a UDP SLP (port 427) request, enabling a remote attac...

CVE-2007-0767

Phorum CVE-2007-0767 is an XSS vulnerability in the core of Phorum prior to version 5.1.18, allowing remote attackers to inject arbitrary script or HTML via unspecified vectors. The available sources indicate impact to confidentiality, integrity, and availability (partial), with network access an...

CVE-2006-0767

CGIWrap before 3.10 allows remote attackers to obtain sensitive information via unknown attack vectors that cause errors in scripts that reveal system information...

CVE-2006-0767

CGIWrap before 3.10 allows remote attackers to obtain sensitive information via unknown attack vectors that cause errors in scripts that reveal system information...

CVE-2006-0767

CVE-2006-0767 affects CGIWrap prior to 3.10. The vulnerability allows remote attackers to obtain sensitive information due to errors in scripts that reveal system information. Affected: CGIWrap

Fedora Core 3 : kernel-2.6.11-1.14_FC3 (2005-313)

This update rebases the kernel to the latest upstream stable release, which fixes a number of security issues. Notably : - CVE-2005-0210 : dst leak - CVE-2005-0384 : ppp dos - CVE-2005-0531 : Sign handling issues. - CVE-2005-0400 : EXT2 information leak. - CVE-2005-0449 : Remote oops. -...

CVE-2005-0767

CVE-2005-0767 is documented in multiple advisories as a race condition in the Radeon DRI driver. The vulnerability affects systems using the Linux kernel with Radeon DRI hardware accelerated graphics, where a local user with DRI privileges could potentially gain root privileges due to a race in t...

CVE-2004-0767

NGSEC StackDefender 1.10 allows attackers to cause a denial of service system crash via an invalid address for the ObjectAttribues parameter to the hooks for the 1 ZwCreateFile or 2 ZwOpenFile functions...

CVE-2004-0767

The CVE-2004-0767 entry concerns NGSEC StackDefender 1.10. The vulnerability arises when an invalid address is supplied for the ObjectAttributes parameter to the hooks for ZwCreateFile and ZwOpenFile, potentially allowing a denial of service via a system crash. The available documentation provide...

CVE-2004-0767

NGSEC StackDefender 1.10 allows attackers to cause a denial of service system crash via an invalid address for the ObjectAttribues parameter to the hooks for the 1 ZwCreateFile or 2 ZwOpenFile functions...

CVE-2003-0767

Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and 0.27 and earlier for Linux and BSD, allows remote attackers to cause a denial of service and execute arbitrary code via a client request with a large length value...

CVE-2003-0767

The CVE-2003-0767 entry describes a buffer overflow in RogerWilco components: the RogerWilco graphical server (1.4.1.6 and earlier), Windows dedicated server (0.32a and earlier), and Linux/BSD versions (0.27 and earlier). The flaw allows remote attackers to trigger a denial of service and potenti...

CVE-2003-0767

Buffer overflow in RogerWilco graphical server 1.4.1.6 and earlier, dedicated server 0.32a and earlier for Windows, and 0.27 and earlier for Linux and BSD, allows remote attackers to cause a denial of service and execute arbitrary code via a client request with a large length value...