129 matches found
Fedora Update for kernel FEDORA-2010-7779
Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2010-7779 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
CVE-2010-1146
The CVE-2010-1146 entry concerns the Linux kernel (2.6.33.2 and earlier) where, if a ReiserFS filesystem exists, read/write access to the .reiserfs_priv directory is not restricted. Local attackers could exploit this by modifying extended attributes or ACLs, demonstrated by deleting a file under ...
CVE-2010-1146
creationtimestamp| type| source ---|---|--- 2010-04-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12130...
VMSA-2009-0005 VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2009-0005 Synopsis: VMware Hosted products, VI Client and patches for ESX and ESXi resolve multiple security issues Issue date:...
VMware宿主产品VMSA-2009-0005多个远程漏洞
BUGTRAQ ID: 34373 CVE ID：CVE-2008-4916 CVE-2008-3761 CVE-2009-1146 CVE-2009-1147 CVE-2009-0910 CVE-2009-0909 CVE-2009-0908 CVE-2009-0177 CVE-2009-0518 CNCVE ID：CNCVE-20084916 CNCVE-20083761 CNCVE-20091146 CNCVE-20091147 CNCVE-20090910 CNCVE-20090909 CNCVE-20090908 CNCVE-20090177 CNCVE-20090518...
CVE-2009-1146
Affected software: VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x before 2.0.1 build 156745. Vulnerability: An unspecified DoS issue exists in the ioctl handling of hcmon.sys, enablin...
CVE-2008-1146
CVE-2008-1146 affects OpenBSD 2.8–4.2 where a PRNG using XOR with 3-bit hops (Algorithm X3) enables remote attackers to infer DNS transaction IDs from prior outputs, potentially enabling DNS cache poisoning on OpenBSD’s BIND modification. Impact per NVD indicates partial confidentiality, partial ...
Debian: Security Advisory (DSA-1146-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1146-1 (krb5)
The remote host is missing an update to krb5 announced via advisory DSA 1146-1. In certain application programs packaged in the MIT Kerberos 5 source distribution, calls to setuid and seteuid are not always checked for success and which may fail with some PAM configurations. A local user could...
Debian DSA-1146-1 : krb5 - programming error
In certain application programs packaged in the MIT Kerberos 5 source distribution, calls to setuid and seteuid are not always checked for success and may fail with some PAM configurations. A local user could exploit one of these vulnerabilities to result in privilege escalation. No exploit code ...
CVE-2006-1146
The provided details describe a stack-based buffer overflow in the Cmd_Say_f function (g_cmds.c) affecting Alien Arena 2006 Gold Edition 5.00. An attacker could remotely trigger this by sending a long message to the server, potentially allowing arbitrary code execution. The vulnerability is class...
CVE-2003-1146
The CVE describes a cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0, exploitable via the dir parameter to inject arbitrary script/HTML. Multiple sources (NVD, Red Hat, CVE List) confirm the issue and its description. No explicit exploitation details, vectors beyon...
CVE-2005-1146
NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in the login command in calendar.pl in CalendarScript 3.21 allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-1145...
CVE-2005-1146
CalendarScript 3.21 is affected by a Cross‑Site Scripting (XSS) flaw in the login command (calendar.pl) via the username parameter. The issue is documented as CVE-2005-1146 and is noted by some sources as disputed by the vendor. Connected sources also reference CalendarScript 3.21 alongside previ...
CVE-2005-1146
NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in the login command in calendar.pl in CalendarScript 3.21 allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-1145...
CVE-2004-1146
CVE-2004-1146 affects CVSTrac prior to 1.1.5. The vulnerability is due to multiple cross-site scripting flaws in the main.c and login.c components, enabling remote attackers to inject arbitrary HTML and script into the victim’s browser. This aligns with multiple public disclosures and CVE records...
CVE-2004-1146
Multiple cross-site scripting XSS vulnerabilities in 1 main.c and 2 login.c for CVSTrac before 1.1.5 allow remote attackers to inject arbitrary HTML and web script...
CVE-2002-1146
The CVE-2002-1146 issue affects BIND 4 and BIND 8.2.x stub resolver libraries, and older glibc/libc/libresolv components (e.g., glibc ≤ 2.2.5) which use the maximum buffer size instead of the actual DNS response size, causing a read buffer overflow. This can enable a remote attacker to cause a de...
CVE-2002-1146
The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum buffer size instead of the actual size when processing a DNS response, which causes the stub resolvers to read past the actual boundary "read buffer...
CVE-2002-1146
The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum buffer size instead of the actual size when processing a DNS response, which causes the stub resolvers to read past the actual boundary "read buffer...