CVE-2015-1076

CVE-2015-1076 affects WebKit as used by Apple Safari (pre-6.2.4, pre-7.1.4, pre-8.0.4). The issue allows remote attackers to run arbitrary code or cause memory corruption and application crashes via a crafted website. Public details in the Initial document describe the vulnerability, while connec...

CVE-2015-1076

WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other CVEs listed in...

CVE-2012-1076

The CVE-2012-1076 affects the TYPO3 extension rtg_files in the Documents download feature, vulnerable before version 1.5.2 . The issue is a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Impact details are limi...

CVE-2011-1076

net/dnsresolver/dnskey.c in the Linux kernel before 2.6.38 allows remote DNS servers to cause a denial of service NULL pointer dereference and OOPS by not providing a valid response to a DNS query, as demonstrated by an erroneous grand.centrall.org query, which triggers improper handling of error...

CVE-2011-1076

CVE-2011-1076 affects the Linux kernel up to 2.6.37 in dns_key.c; remote DNS servers sending invalid responses can trigger a NULL pointer dereference/OOPS, leading to a denial of service. Reports from SUSE/Red Hat/NVD corroborate. Remediation: upgrade to kernel 2.6.38 or newer (vendor patches). E...

Linux Kernel "dns_key.c"空指针引用拒绝服务漏洞

BUGTRAQ ID: 46732 CVE ID: CVE-2011-1076 Linux Kernel是Linux操作系统的内核。 Linux Kernel在dnskey.c的实现上存在空指针引用拒绝服务漏洞，远程攻击者利用此漏洞使内核引用无效内存位置，造成拒绝服务。 在DNS解析程序密钥用错误提示实例化时，尝试读取该密钥可造成崩溃。因为userread以为这里会有一个负载，但事实上没有。 Linux kernel 2.6.x Ubuntu Ubuntu 11.04 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Ubuntu: Security Advisory (USN-1076-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 9.10 / 10.04 LTS / 10.10 : clamav vulnerability (USN-1076-1)

It was discovered that the Microsoft Office processing code in libclamav improperly handled certain Visual Basic for Applications VBA data. This could allow a remote attacker to craft a document that could crash clamav or possibly execute arbitrary code. In the default installation, attackers wou...

CVE-2010-1076

The CVE-2010-1076 entry concerns an XSS in Entry Level CMS (EL CMS): index.php allows remote injection of arbitrary script/HTML via the subj parameter when handling a forced SQL error message. This is documented across multiple sources (NVD, Red Hat, CVE list, etc.). Details specify the vulnerabl...

CVE-2009-1076

Sun Java System Identity Manager IdM 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the user account exists, which allows remote attackers to enumerate valid usernames...

CVE-2009-1076

CVE-2009-1076 affects Sun Java System Identity Manager (IdM) 7.0 through 8.0. The end-user login flow based on a question, when used with IDMROOT/questionLogin.jsp?accountId=USER, reveals different responses depending on whether USER exists. This behavior enables remote attackers to enumerate val...

CentOS Update for python-docs CESA-2007:1076 centos3 i386

Check for the Version of python-docs OpenVAS Vulnerability Test CentOS Update for python-docs CESA-2007:1076 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CentOS Update for python-docs CESA-2007:1076 centos3 x86_64

Check for the Version of python-docs OpenVAS Vulnerability Test CentOS Update for python-docs CESA-2007:1076 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in WebCT Campus Edition 4.1.5.8, when "Don't wrap text" is enabled, allow remote authenticated users to inject arbitrary web script or HTML via a 1 mail message or 2 discussion board message. NOTE: this might overlap CVE-2005-1076...

CVE-2008-1076

CVE-2008-1076 describes a Cross-site Scripting (XSS) vulnerability in Interspire Shopping Cart 1.x, where an attacker can inject arbitrary script via the search_query parameter in search.php. The root cause is improper handling/sanitization of the search_query input, enabling script execution in ...

Debian DSA-1076-1 : lynx - programming error

Michal Zalewski discovered that lynx, the popular text-mode WWW Browser, is not able to grok invalid HTML including a TEXTAREA tag with a large COLS value and a large tag name in an element that is not terminated, and loops forever trying to render the broken HTML. %NASLMINLEVEL 70300 C Tenable...

Winlpd 1.2 Build 1076 - Remote Buffer Overflow

!/usr/bin/perl A proof of concept Remote Buffer Overflow Exploit App Vulnerable: Winlpd 1.2 Build 1076 - rabox.com Possibe some problems with WinXP if exploit doesn't work correctly, try another number in var 'loop'. Buffer size 524 bytes. Author: Pablo Isola - [email protected] Neuquen ...

CVE-2006-1076

CVE-2006-1076 affects Invision Power Board (IPB) 2.1.5. The vulnerability is a SQL injection in index.php during a showtopic-like operation, exploitable via the st parameter , allowing remote attackers to execute arbitrary SQL commands. The connected documents do not provide a patch or specific r...

CVE-2006-1076

SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board IPB 2.1.5 allows remote attackers to execute arbitrary SQL commands via the st parameter...

CVE-2005-1076

CVE-2005-1076 describes a cross-site scripting (XSS) vulnerability in the WebCT Campus Edition 4.1 discussion board, allowing an attacker to inject arbitrary script/HTML via the message field. The connected Red Hat and CVE-2008-1225 records corroborate XSS in WebCT 4.1.5.8 and note potential over...