83 matches found
CVE-2013-0951
WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1...
CVE-2013-0951
CVE-2013-0951 affects WebKit as used in Apple iOS before 6.1, enabling remote attackers to cause memory corruption, possible code execution, or a denial of service via a crafted website. The connected records corroborate WebKit-related memory corruption issues in this period but do not specify a ...
CVE-2011-0951
CVE-2011-0951 affects Cisco Secure Access Control System (ACS) 5.1 (with patches 3/4/5) and 5.2 (no patches or patches 1–2). The web-based management interface contains an authentication/authorization flaw that lets a remote, unauthenticated attacker change arbitrary user passwords via unspecifie...
CVE-2010-0951
The CVE (CVE-2010-0951) affects dev4u CMS, specifically the go_target.php component, where a SQL injection vulnerability allows remote attackers to execute arbitrary SQL commands via the kontent_id parameter. According to NVD, this yields a CVSSv2 base score of 7.5 (HIGH) with network exposure, l...
CVE-2010-0951
creationtimestamp| type| source ---|---|--- 2010-03-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11643...
CVE-2009-0951
CVE-2009-0951 is a heap-based overflow in Apple QuickTime
QuickTime < 7.6.2 Multiple Vulnerabilities (Mac OS X)
The version of QuickTime installed on the remote Mac OS X host is older than 7.6.2. Such versions contain several vulnerabilities : - A heap buffer overflow in QuickTime's handling of MS ADPCM encoded audio data may lead to an application crash or arbitrary code execution. CVE-2009-0185 - A memor...
HP-UX Update for Ignite-UX HPSBUX01219
Check for the Version of Ignite-UX OpenVAS Vulnerability Test HP-UX Update for Ignite-UX HPSBUX01219 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Microsoft Autorun Arbitrary Code Execution Vulnerability (08-038)
This host is running Windows Operating System and is prone to Autorun Arbitrary Code Execution Vulnerability. OpenVAS Vulnerability Test $Id: secpodms08-038.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Autorun Arbitrary Code Execution Vulnerability 08-038 Authors: Sujit Ghosal Updated By:...
Code injection
Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by 1 inserting CD-ROM media, 2 inserting DVD media, 3 connecting a USB device, and 4 connecting a Firewire device; 5 allows...
CVE-2008-0951
CVE-2008-0951 affects Windows Vista/Server 2008 where NoDriveTypeAutoRun is not properly enforced. The vulnerability allows code execution via (1) CD-ROM AutoRun paths or (2) U3-enabled USB devices containing an Autorun.inf file, with user-assisted remote or physically proximate access. Microsoft...
CVE-2007-4135
The NFSv4 ID mapper nfsidmap before 0.17 does not properly handle return values from the getpwnamr function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client...
CVE-2007-0951
Technical details (affected products, versions, root cause, or fixes) are not publicly available in the provided connected documents. Monitor for updates.
CVE-2006-0951
The CVE-2006-0951 entry concerns the NOD32 2.5 GUI (nod32.exe). The vulnerability arises because during a scheduled on-demand scan, the GUI runs with SYSTEM privileges, enabling local users to execute arbitrary code via unspecified attack vectors. Affected component: nod32.exe GUI within NOD32 2....
TFTP File Detection (HP Ignite-UX passwd) - Active Check
The remote host has a vulnerable version of the HP Ignite-UX application installed that exposes the /etc/passwd file to anonymous TFTP access. SPDX-FileCopyrightText: 2005 Corsaire Limited Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
CVE-2004-0951
HP Ignite-UX: The TFTP service’s make_recovery command (pre-C.6.2.241) copies the password file within the TFTP directory tree, enabling remote disclosure of /etc/passwd. Affected: HP-UX Ignite-UX TFTP server. Impact: partial confidentiality. Remediation: upgrade to C.6.2.241 or later (HP Ignite-...
CVE-2005-0951
CVE-2005-0951 is rejected/not used per initial description.
CVE-2001-0951
CVE-2001-0951 : Windows 2000 is affected. Vulnerability allows remote attackers to cause a denial of service by flooding the IKE UDP port 500 with packets containing a large number of dot characters, leading to CPU consumption. The connected records confirm Windows 2000 as the affected platform a...
CVE-2003-0951
Partition Manager parmgr in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain privileges...
CVE-2002-0951
The CVE-2002-0951 entry concerns a SQL injection vulnerability in Ruslan Builder. The underlying issue is an injection flaw in authentication via the username and password fields allowing remote attackers to obtain administrative privileges through a "'--" sequence. The available documents do not...