MS09-035: Vulnerabilities in Visual Studio Active Template Library Could Allow Remote Code Execution (969706)

The remote Windows host contains a version of the Microsoft Active Template Library ATL, included as part of Visual Studio or Visual C++, that is affected by multiple vulnerabilities : - On systems with components and controls installed that were built using Visual Studio ATL, an issue in the ATL...

CVE-2009-0901

CVE-2009-0901 describes a remote code execution vulnerability in Microsoft Active Template Library (ATL) used by Visual Studio and Windows components. The issue arises when ATL headers mishandle uninitialized VARIANTs, allowing a specially crafted stream to trigger VariantClear on an uninitialize...

Solaris Update for /kernel/fs/hsfs 109765-06

Check for the Version of /kernel/fs/hsfs OpenVAS Vulnerability Test Solaris Update for /kernel/fs/hsfs 109765-06 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Solaris Update for hsfs 121995-01

Check for the Version of hsfs OpenVAS Vulnerability Test Solaris Update for hsfs 121995-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

FreeBSD Ports: moinmoin

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Legendary TXT overflow-vulnerability warning-the black bar safety net

Legendary TXT overflow Six years ago the discovery of the cave,the EXP is now estimated to don't hurt to kill the power,release to primarily meet the noob's curiosity. Basically can also prove Nothing Is Impossible. CVE: CAN-2 0 0 4-0 9 0 1 MST: MS04-0 4 1 Affected component:mswrd632. wpc/mswrd6...

CVE-2008-0901

BEA WebLogic Server and Express versions 7.0–10.0 are affected by a vulnerability that allows remote attackers to perform brute-force password guessing even when account lockout is enabled. The issue involves crafted URLs that reveal whether a guessed password is correct, enabling iterative guess...

USN-423-1: MoinMoin vulnerabilities

A flaw was discovered in MoinMoin's debug reporting sanitizer which could lead to a cross-site scripting attack. By tricking a user into viewing a crafted MoinMoin URL, an attacker could execute arbitrary JavaScript as the current MoinMoin user, possibly exposing the user's authentication...

CVE-2007-0901

Multiple cross-site scripting XSS vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or HTML via the 1 hitcounts and 2 general parameters, different vectors than CVE-2007-0857. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-0901

Removed by vendor...

CVE-2007-0901

CVE-2007-0901: Multiple XSS vulnerabilities in MoinMoin 1.5.7 Info pages allow remote attackers to inject arbitrary web script or HTML via the (1) hitcounts and (2) general parameters. The description notes the issue in MoinMoin 1.5.7; root cause details and a formal fix/mitigation are not provid...

Solaris 9 (sparc) : 116047-03

SunOS 5.9: hsfs Patch. Date this patch was last updated by Sun : Feb/22/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid2101...

Solaris 8 (x86) : 109765-06

SunOS 5.8x86: /kernel/fs/hsfs patch. Date this patch was last updated by Sun : Feb/21/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Solaris 8 (sparc) : 109764-06

SunOS 5.8: /kernel/fs/hsfs and /kernel/fs/sparcv9/hsfs patch. Date this patch was last updated by Sun : Feb/21/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (x86) : 118813-03

SunOS 5.10x86: hsfs patch. Date this patch was last updated by Sun : Feb/22/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

CVE-2006-0901

CVE-2006-0901 concerns an unspecified vulnerability in the Solaris hsfs filesystem affecting Solaris 8/9/10 that could cause a denial of service (panic) or allow arbitrary code execution. The connected documents indicate public patching activity for hsfs across affected Solaris releases: Solaris ...

Solaris 10 (sparc) : 119596-03

SunOS 5.10: hsfs patch. Date this patch was last updated by Sun : Feb/22/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

CVE-2005-0901

CVE-2005-0901 affects NukeBookmarks 0.6 for PHP-Nuke with multiple XSS vulnerabilities that allow remote attackers to inject arbitrary scripts via the catname, markname, comment, or category parameters. The NVD entry records a CVSS v2 base score of 4.3 (Medium) with network attack vector, no auth...

RHEL 2.1 : postgresql (RHSA-2003:314)

Updated PostgreSQL packages that correct a buffer overflow in the toascii routines are now available. PostgreSQL is an advanced Object-Relational database management system DBMS. Two bugs that can lead to buffer overflows have been found in the PostgreSQL abstract data type to ASCII conversion...

PostgreSQL to_ascii() Function Remote Overflows

According to its version number, the PostgreSQL server listening on this port is vulnerable to two buffer overflows in the toascii function that could allow an attacker who can query the remote database to execute arbitrary code, subject to the privileges under which the service operates...