Adobe Flash Player for Mac <= 20.0.0.286 Multiple Vulnerabilities (APSB16-04)

The version of Adobe Flash Player installed on the remote Mac OS X host is prior or equal to version 20.0.0.286. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows a remote attacker to execute arbitrary code. CVE-2016-0985 - Multiple use-after-fre...

Adobe Flash Player <= 20.0.0.286 Multiple Vulnerabilities (APSB16-04)

The version of Adobe Flash Player installed on the remote Windows host is prior or equal to version 20.0.0.286. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists that allows a remote attacker to execute arbitrary code. CVE-2016-0985 - Multiple use-after-free...

Network Vision IntraVue Code Injection Vulnerability

OVERVIEW Researcher Jürgen Bilberger from Daimler TSS GmbH has identified a code injection vulnerability in Network Vision’s IntraVue software. Network Vision has produced a new version that mitigates this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The...

CVE-2015-0977

Summary: Network Vision IntraVue on Windows is affected before version 2.3.0a14. Root cause: OS command injection due to improper handling of input ( CWE-78 ). Impact: unauthenticated remote attacker can execute arbitrary OS commands on the affected server, compromising confidentiality, integrity...

CVE-2014-0977

Cross-site scripting XSS vulnerability in the Rich Text Editor in Movable Type 5.0x, 5.1x before 5.161, 5.2.x before 5.2.9, and 6.0.x before 6.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0977

CVE-2014-0977 is a cross-site scripting (XSS) vulnerability in Movable Type’s Rich Text Editor affecting Movable Type 5.0x, 5.1x before 5.161, 5.2.x before 5.2.9, and 6.0.x before 6.0.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Public sourc...

APPLE-SA-2013-03-19-2 Apple TV 5.2.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-03-19-2 Apple TV 5.2.1 Apple TV 5.2.1 is now available and addresses the following: Apple TV Available for: Apple TV 2nd generation and later Impact: A local user may be able to execute unsigned code Description: A state management issue...

CVE-2013-0977

dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments...

CVE-2013-0977

CVE-2013-0977 affects Apple iOS prior to 6.1.3 and Apple TV prior to 5.2.1. The issue is a state-management flaw in loading Mach-O executable files with overlapping segments, which allows a local user to bypass code-signing requirements. Impact, as stated in multiple sources, is local execution o...

CVE-2013-0977

dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments...

Apple iPhone/iPad/iPod touch iOS 6.1.3之前版本安全绕过漏洞(CVE-2013-0977)

BUGTRAQ ID: 58586 CVECAN ID: CVE-2013-0977 Apple iOS是由苹果公司开发的手持设备操作系统。 iPhone, iPod touch, iPad上使用的Apple iOS 6.1.3之前版本在处理带有重叠段的Mach-O可执行文件时存在状态管理问题，可导致攻击者绕过某些安全限制并在受影响设备上执行任意代码。 0 Apple iOS = 6.1.3 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...

LuraWave JP2 ActiveX Control < 2.1.5.11 jp2_x.dll Remote Buffer Overflow

The version of the LuraWave JP2 ActiveX control installed on the remote Windows host reportedly contains a stack-based buffer overflow vulnerability. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can leverage this issue to execute arbitrar...

CVE-2012-0977

CVE-2012-0977 concerns a stack-based buffer overflow in jp2_x.dll of the LuraWave JP2 ActiveX Control (versions up to 2.1.5.10; fixed in 2.1.5.11). The flaw allows remote attackers to execute arbitrary code by feeding a JP2 file containing a crafted Quantization Default (QCD) marker segment. Affe...

MS11-021 / MS11-022 / MS11-023: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2489279 / 2489283 / 2489293) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Office that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Office file, these issues could be leveraged to execute arbitrary code subject to the user's...

Microsoft Office Remote Code Execution Vulnerabilities (2489293)

This host is missing a critical security update according to Microsoft Bulletin MS11-023. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-0977

CVE-2011-0977 is a use-after-free in Microsoft Office’s handling of graphic objects within Office drawing data, enabling remote code execution. Affected products include Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004/2008 for Mac, and the Open XML File Format Converter for Mac. The ...

RedHat Update for openssl RHSA-2010:0977-01

Check for the Version of openssl OpenVAS Vulnerability Test RedHat Update for openssl RHSA-2010:0977-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RHEL 4 : openssl (RHSA-2010:0977)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0977 advisory. - openssl: NETSCAPEREUSECIPHERCHANGEBUG downgrade-to-disabled ciphersuite attack CVE-2008-7270 - openssl: missing bnwexpand return value...

Lotus Domino Password Hash Collector

Get users passwords hashes from names.nsf page This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Lotus Domino Password Hash Collector', 'Description' = 'Get users passwords hashes from names.nsf...

CVE-2010-0977

PD PORTAL 4.0 is described as storing sensitive information under the web root with insufficient access control, enabling remote attackers to download the database file db.mdb via a direct request. The available sources confirm this vulnerability pattern but do not provide detailed exploit steps,...