132 matches found
Description of the security update for vulnerabilities in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: April 10, 2018
Description of the security update for vulnerabilities in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: April 10, 2018 Summary A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affect...
KB4093122: Windows Server 2012 April 2018 Security Update
The remote Windows host is missing security update 4093122 or cumulative update 4093123. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in...
Security Updates for Windows Server 2008 (April 2018)
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory. An attacker who successfully...
lequipe.fr XSS vulnerability
Vulnerable URL: https://www.lequipe.fr/Rugby/" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1003 VIP website status:| Yes Check lequipe.fr SSL connection:| Grade: A Coordinated Disclosure Timeline: Description...
CVE-2016-1003
PHPMailer remote code execution vulnerability CVE-2016-10033 affects PHPMailer’s mailSend function in the isMail transport, where PHPMailer before 5.2.18 could execute arbitrary code by passing crafted input to the mail command via a Sender property. Exploitation could occur remotely. The issue i...
CVE-2016-1003
creationtimestamp| type| source ---|---|--- 2016-12-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41688...
IniNet Solutions SCADA Web Server < 2.02.0000
Binary data 9011.prm...
CVE-2015-1003
CVE-2015-1003 concerns the IniNet embeddedWebServer (aka eWebServer) prior to version 2.02, where a path traversal vulnerability (CWE-22) allows remote attackers to read arbitrary OS files via crafted pathname. Public sources consistently describe this as a directory traversal flaw in the SCADA W...
CVE-2015-1003
Directory traversal vulnerability in IniNet embeddedWebServer aka eWebServer before 2.02 allows remote attackers to read arbitrary files via a crafted pathname...
Oracle: Security Advisory (ELSA-2015-1003)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS Update for kmod-kvm CESA-2015:1003 centos5
Check the version of kmod-kvm SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882193";...
openSUSE Security Update : clamav (openSUSE-SU-2011:0208-1)
Specially crafted VBA data in Microsoft Office documents could crash clamav or potentially even cause execution of arbitrary code. clamav was updated to version 0.97 to fix the issue CVE-2011-1003. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...
Buffer overflow
Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service device crash and possibly execute arbitrary code via a long string in the URI in an RTSP SETUP request...
AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ AVTECH DVR multiple vulnerabilities 1. Advisory Information Title: AVTECH DVR multiple vulnerabilities Advisory ID: CORE-2013-0726 Advisory URL: http://www.coresecurity.com/advisories/avtech-dvr-multiple-vulnerabilities Date...
AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities
AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ AVTECH DVR multiple vulnerabilities 1. Advisory Information Title: AVTECH DVR multiple vulnerabilities Advisory ID: CORE-2013-0726 Advisory URL:...
Mac OS X : Apple Safari < 6.0.5 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.0.5. It is, therefore, potentially affected by several issues : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code...
APPLE-SA-2013-05-16-1 iTunes 11.0.3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-05-16-1 iTunes 11.0.3 iTunes 11.0.3 is now available and addresses the following: iTunes Available for: Mac OS X v10.6.8 or later, Windows 7, Vista, XP SP2 or later Impact: An attacker in a privileged network position may manipulate HTTP...
KLA10076 Multiple vulnerabilities in Apple iTunes
Multiple critical vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or spoof HTTPS servers. Below is a complete list of vulnerabilities 1. Vectors related to browsing the iTunes Store can be...
CVE-2013-1003
CVE-2013-1003 : WebKit in Apple iTunes prior to 11.0.3 is affected. The issue allows a remote attacker to perform MITM or cause memory corruption leading to arbitrary code execution or a crash via iTunes Store browsing. The only details in the provided documents specify the vulnerability class an...