132 matches found
Apple TV < 7.0.4 Multiple Vulnerabilities
Binary data 8674.prm...
CVE-2015-1062
CVE-2015-1062 affects MobileStorageMounter in iOS before 8.2 and Apple TV before 7.1, where invalid disk-image folders were not deleted due to an issue in the developer disk mounting logic. This allowed a crafted app to create folders in arbitrary filesystem locations. Apple released fixes in iOS...
Fedora Update for kernel FEDORA-2014-1062
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for kernel FEDORA-2014-1062
Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2014-1062 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
CVE-2013-1062
CVE-2013-1062 affects ubuntu-system-service up to versions 0.2.4 before 0.2.4.1, 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1. It does not properly use D-Bus for communication with a Polkit authority, allowing local users to bypass intended access restrictions by exploiting a PolkitUnixProcess ...
CVE-2013-1062
ubuntu-system-service 0.2.4 before 0.2.4.1. 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...
ManageEngine Applications Manager 9.x, 10.x Multiple Vulnerabilities - Active Check
ManageEngine Applications Manager is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2012-1062
Multiple cross-site scripting XSS vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to inject arbitrary web script or HTML via the 1 period parameter to showHistoryData.do; 2 selectedNetwork, 3 network, or 4 group parameters to showresource.do; 5 header...
CVE-2012-1062
CVE-2012-1062 affects ManageEngine Applications Manager 9.x and 10.x. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary script/HTML via several parameters: period (showHistoryData.do), selectedNetwork/network/group (showres...
CVE-2011-1062
TaskFreak! 0.6.4 exposes multiple XSS vulnerabilities in include/html/header.php allowing injection via (1) sContext, (2) sort, (3) dir, (4) show in index.php; (5) dir, (6) show in print_list.php; and (7) Referer header to rss.php. No remediation details are provided in the supplied documents; no...
CVE-2011-1062
Multiple cross-site scripting XSS vulnerabilities in include/html/header.php in TaskFreak! 0.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 sContext, 2 sort, 3 dir, and 4 show parameters in a save action to index.php; the 5 dir and 6 show parameters to printlist.php;...
CVE-2011-1062
creationtimestamp| type| source ---|---|--- 2011-02-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35337 2011-02-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35336 2011-02-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35338...
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6161)
Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files. CVE-2009-0658 / CVE-2009-0927 / CVE-2009-0193 / CVE-2009-0928 / CVE-2009-1061 /...
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6121)
Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files. CVE-2009-0658 / CVE-2009-0927 / CVE-2009-0193 / CVE-2009-0928 / CVE-2009-1061 /...
CVE-2010-1062
CVE-2010-1062 affects Phpkobo Free Real Estate Contact Form 1.09; vulnerable component is codelib/sys/common.inc.php. The root cause is a directory traversal flaw that allows remote inclusion/execution of local files via the LANG_CODE parameter when magic_quotes_gpc is disabled. This is described...
SuSE 11 Security Update : acroread_ja (SAT Patch Number 769)
Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files. CVE-2009-0658 / CVE-2009-0927 / CVE-2009-0193 / CVE-2009-0928 / CVE-2009-1061 /...
RHEL 3 / 4 / 5 : acroread (RHSA-2009:0376)
Updated acroread packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 Extras, Red Hat Enterprise Linux 4 Extras, and Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team...
openSUSE Security Update : acroread (acroread-689)
Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files. CVE-2009-0658, CVE-2009-0927, CVE-2009-0193, CVE-2009-0928, CVE-2009-1061, CVE-2009-1062...
openSUSE Security Update : acroread (acroread-689)
Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files. CVE-2009-0658, CVE-2009-0927, CVE-2009-0193, CVE-2009-0928, CVE-2009-1061, CVE-2009-1062...
SuSE Security Summary SUSE-SR:2009:009
The remote host is missing updates announced in advisory SUSE-SR:2009:009. SuSE Security Summaries are short on detail when it comes to the names of packages affected by a particular bug. Because of this, while this test will detect out of date packages, it cannot tell you what bugs impact which...