87 matches found
Memory corruption
Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1012,...
Memory corruption
Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1020,...
Memory corruption
Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1012,...
Memory corruption
Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1012,...
CVE-2016-1026
Technical details (affected products, exploited vector, impact, fixes) for CVE-2016-1026 are not provided in the supplied documents; monitor for updates from official sources.
CVE-2015-1026
CVE-2015-1026 describes reflected XSS in ZOHO ManageEngine ADManager Plus (Admin Console) prior to 6.2 Build 6270. The vulnerabilities affect the Help Desk Technician page (technicianSearchText) and the Help Desk Roles page (rolesSearchText), enabling remote attackers to inject arbitrary HTML/scr...
APPLE-SA-2013-09-20-1 Apple TV 6.0
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2013-09-20-1 Apple TV 6.0 Apple TV 6.0 is now available and addresses the following: Apple TV Available for: Apple TV 2nd generation and later Impact: Viewing a maliciously crafted PDF file may lead to an unexpected application termination or...
CVE-2013-1026
CVE-2013-1026 is a buffer overflow in ImageIO on OS X before 10.8.5, triggered by JPEG2000 data in PDFs. This could allow remote code execution or cause a denial of service (crash). Apple released OS X 10.8.5 (Mountain Lion) security update to fix the issue.
Apple MAC OS X ImageIO 缓冲区溢出漏洞(CVE-2013-1026)
BUGTRAQ ID: 62369 CVECAN ID: CVE-2013-1026 Apple Mac OS X是苹果电脑操作系统软件。 Mac OS X 10.8 - 10.8.4在处理PDF文件内JPEG2000编码的数据时存在缓冲区溢出漏洞，远程攻击者通过特制的PDF文件，利用此漏洞可造成应用终止或执行任意代码。 0 Apple Mac OS X 10.8 - 10.8.4 Apple Mac OS X 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（HT5880）以及相应补丁: HT5880：About the security content of ...
RHEL 5 / 6 : jbossas and jboss-naming (RHSA-2012:1026)
The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1026 advisory. - JNDI: unauthenticated remote write access is permitted by default CVE-2011-4605 - JBoss: authentication bypass when running under JACC...
CVE-2012-1026
creationtimestamp| type| source ---|---|--- 2012-02-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18467...
CVE-2011-1026
Apache Archiva is affected by CSRF vulnerabilities (CVE-2011-1026) in Archiva 1.0–1.2.2 and 1.3.x before 1.3.5. The issues allow remote attackers to hijack administrator sessions, potentially compromising the entire application. Affected component: Archiva web admin/session handling; vulnerabilit...
Apache Archiva 1.3.4 Cross Site Request Forgery
Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in Apache Archiva 1.3.4 and previous versions. The following is the disclosure document Title: Multiple CSRF Vulnerabilities in Apache Archiva 1.3.4 --------------------------------------------------------------------...
Apache Archiva 1.3.4 Cross Site Request Forgery
CVE-2011-1026: Apache Archiva Multiple CSRF vulnerability Severity: High Vendor: The Apache Software Foundation Versions Affected: Archiva 1.3.0 - 1.3.4 The unsupported versions Archiva 1.0 - 1.2.2 are also affected. Description: An attacker can build a simple html page containing a hidden Image...
Ubuntu Update for paste vulnerability USN-1026-1
Ubuntu Update for Linux kernel vulnerabilities USN-1026-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10261.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for paste vulnerability USN-1026-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Ubuntu 10.04 LTS : paste vulnerability (USN-1026-1)
It was discovered that Python Paste did not properly sanitize certain strings, resulting in cross-site scripting XSS vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this ...
TPTI-10-04: Oracle Secure Backup Scheduler Service Remote Code Execution Vulnerability
TPTI-10-04: Oracle Secure Backup Scheduler Service Remote Code Execution Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-10-04 -- CVE ID: CVE-2010-0898 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Oracle -- Affected Products: Oracle Secure Backup -- TippingPointTM IPS...
CVE-2009-1026
Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...
CVE-2009-1026
CVE-2009-1026 affects Kim Websites 1.0, with SQL injection vulnerabilities in login.php. The issue allows remote attackers to manipulate the database by supplying crafted values for the username or password fields, enabling arbitrary SQL execution. This aligns with the NVD assessment of a high-se...