CVE-2015-0819

The CVE-2015-0819 issue affects Mozilla Firefox and stems from UITour::onPageEvent not validating that an API call originates from a foreground tab. This can enable spoofing and clickjacking when a UITour page in a background tab is whitelisted. Affected releases are Firefox versions before 36.0;...

Autodesk AutoCAD不可信搜索路径权限提升漏洞

CVE ID:CVE-2014-0819 Autodesk AutoCAD是一款强大的大型计算机辅助绘图软件。 Autodesk AutoCAD不正确处理搜索路径，允许本地攻击者利用漏洞在当前工作目录存放木马DLL来提升权限。 0 Autodesk AutoCAD 2013 厂商补丁： Autodesk ----- 用户可联系厂商获得相应的升级或补丁程序： http://www.autodesk.com/products/autodesk-autocad/overview...

CVE-2014-0819

CVE-2014-0819 affects Autodesk AutoCAD prior to 2014. The vulnerability is an insecure DLL search path: a Trojan DLL placed in the current working directory can be loaded, enabling local privilege escalation/arbitrary code execution. Affected products: AutoCAD 2013 and earlier. Root cause: untrus...

Oracle Linux 5 : pam (ELSA-2010-0819)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0819 advisory. - fix insecure dropping of priviledges in pamxauth and pammail - CVE-2010-3316 637898, CVE-2010-3435 641335 Tenable has extracted the preceding...

CVE-2012-0819

Vulnerable software: Joomla! 1.6.x and 1.7.x before 1.7.4. Root cause is not detailed in the provided documents, but the issue allows remote attackers to obtain sensitive information via unknown vectors (information disclosure). No explicit exploit details are provided. A fix is indicated by the ...

Design/Logic Flaw

Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote attackers to affect integrity, related to Enterprise Infrastructure SEC, a different vulnerability than CVE-2011-0819...

CVE-2011-0819

Technical details about CVE-2011-0819 are not publicly available in the provided documents. Monitor for updates from NVD/Oracle as more information becomes available.

Microsoft Windows OpenType CFF驱动本地权限提升漏洞（MS10-037）

BUGTRAQ ID: 40572 CVE ID: CVE-2010-0819 Windows是微软发布的非常流行的操作系统。 Windows OpenType CFF驱动没有正确地验证用户态传送给内核态的某些数据，如果用户查看了特制CCF字体所渲染的内容，在获得字型轮廓时就会用任意数量的0字节覆盖内核内存，导致内核级权限提升。攻击者必须拥有有效的登录凭据且能够本地登录才可以利用这个漏洞，无法远程或匿名利用。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft...

Microsoft Windows OpenType Compact Font Format Driver Privilege Escalation Vulnerability (980218)

This host is missing an important security update according to Microsoft Bulletin MS10-037. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2010-0819

CVE-2010-0819: Elevation of privilege in the Windows OpenType Compact Font Format (CFF) Driver due to improper validation when copying data from user mode to kernel mode. Affected: Windows 2000 SP4, XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 SP2/R2, and Windows 7. Local attacker with...

[security bulletin] HPSBMA02448 SSRT061231 rev.1 - HP Network Node Manager (NNM) Remote Console Running on Windows, Local Execution of Arbitrary Code, Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01817357 Version: 1 HPSBMA02448 SSRT061231 rev.1 - HP Network Node Manager NNM Remote Console Running on Windows, Local Execution of Arbitrary Code, Denial of Service DoS NOTICE: The information ...

CVE-2009-0819

The CVE applies to MySQL: affected versions are MySQL 5.1.x before 5.1.32 and 6.0.x before 6.0.10. Remote authenticated users can trigger a denial of service (server crash) by using an XPath expression that employs a scalar expression as a FilterExpr with ExtractValue() or UpdateXML(), which lead...

CVE-2009-0819

creationtimestamp| type| source ---|---|--- 2009-02-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32838...

Fedora Core 10 FEDORA-2009-0819 (moodle)

The remote host is missing an update to moodle announced via advisory FEDORA-2009-0819. OpenVAS Vulnerability Test $Id: fcore20090819.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0819 moodle Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 10 FEDORA-2009-0819 (moodle)

The remote host is missing an update to moodle announced via advisory FEDORA-2009-0819. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2008-0819

CVE-2008-0819 concerns a directory traversal vulnerability in PlutoStatus Locator 1.0 pre alpha. The flaw resides in index.php and allows remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) sequence in the page parameter. Documented impact indicates local fil...

Debian Security Advisory DSA 060-1 (fetchmail)

The remote host is missing an update to fetchmail announced via advisory DSA 060-1. OpenVAS Vulnerability Test $Id: deb0601.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 060-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-0819

CVE-2007-0819 affects HP Network Node Manager (NNM) Remote Console on Windows, specifically versions 7.50, 7.51, and 7.53. The root cause is that the Remote Console assigns Everyone Full Control permissions to the %PROGRAMFILES%\HP OpenView directory tree, enabling local users to escalate privile...

CVE-2006-0819

CVE-2006-0819 affects Dwarf HTTP Server 1.3.2. A validation error in the requested URL filename extension (dot/space/slash/NULL characters) allows remote disclosure of JSP source. Secunia also notes unsanitized error responses enabling XSS. Mitigation: update to version 1.3.3.

Secunia Research: Dwarf HTTP Server Source Disclosure and Cross-Site Scripting

====================================================================== Secunia Research 13/03/2006 - Dwarf HTTP Server Source Disclosure and Cross-Site Scripting - ====================================================================== Table of Contents Affected...