152 matches found
CVE-2013-1214
CVE-2013-1214 affects the Cisco Unified Contact Center Express (Unified CCX) scripts editor. The issue is improper privilege management for anonymous logins, allowing remote attackers to read arbitrary scripts by browsing the scripts repository directory. This is an unauthenticated access concern...
Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64
Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. CVE-2010-1211, CVE-2010-2753, CVE-2010-1214 A memory corruption fl...
CVE-2012-1214
The CVE-2012-1214 vulnerability affects Yoono Desktop Application (before 1.8.21) in the Add friends module. It is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the create field in a “Create a group” action. Documented impact is arbitrar...
CVE-2011-4164
Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1214...
Code injection
Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1214...
CVE-2011-4164
Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1214...
CVE-2011-4164
HP Database Archiving Software 6.31 is affected by CVE-2011-4164 via a GIOP parsing buffer overflow in HP DataDirect/OpenAccess components (SequeLink), enabling remote code execution. The advisory notes a trust of a packet size field into a fixed-size buffer leading to overflow and code execution...
Symantec Mail Security Autonomy Verity Keyview Filter Vulnerabilities (SYM11-013)
The file attachment filter component included with the instance of Symantec Mail Security installed on the remote Windows host is reportedly affected by multiple buffer overflow vulnerabilities that can be triggered when handling attachments of various types. By sending an email with a specially...
Multi-Vendor Autonomy Verity Keyview Filter Multiple Issues
SUMMARY Multiple sources have identified several security issues in Autonomys Verity Keyview Content Filter libraries. Symantec has updated the Keyview modules being shipped with Symantec products to address these issues. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|---...
Ubuntu 10.04 LTS / 10.10 / 11.04 : gimp vulnerability (USN-1214-1)
Tomas Hoger discovered that GIMP incorrectly handled malformed LZW streams. If a user were tricked into opening a specially crafted GIF image file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user's privileges. Note that Tenable Network Security has extracte...
Ubuntu: Security Advisory (USN-1214-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS Update for thunderbird CESA-2010:0545 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
IBM Lotus Notes File Viewers Multiple BOF Vulnerabilities (Windows)
This host has IBM Lotus Notes installed and is prone to multiple buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmlotusnotesmultbofvulnwin.nasl 7024 2017-08-30 11:51:43Z teissa $ IBM Lotus Notes File Viewers Multiple BOF Vulnerabilities Windows Authors: Antu Sanadi Copyright:...
CVE-2011-1214
IBM Lotus Notes (with Autonomy KeyView Verity Filter) is affected by CVE-2011-1214 due to a stack-based/buffer overflow in rtfsr.dll. The vulnerability allows remote code execution via a crafted link in a .rtf attachment, with impact as described in NVD (base score 9.3). It affects Lotus Notes pr...
Month Of Abysssec Undisclosed Bugs - Firefox Plugin Parameter
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | page demonstration """ i=0 whilei\n"; i=i+1 myStyle = myStyle + """ """ cssFile = open"Abysssec.html","w" cssFile.writemyStyle cssFile.close...
Firefox Plugin Parameter EnsureCachedAttrParamArrays Code Execution
Exploit for windows platform in category dos / poc =================================================================== Firefox Plugin Parameter EnsureCachedAttrParamArrays Code Execution =================================================================== Title : Firefox Plugin Parameter...
Mozilla Firefox 3.6.4 - Plugin EnsureCachedAttrParamArrays Remote Code Execution
Mozilla Firefox 3.6.4 - Plugin EnsureCachedAttrParamArrays Remote Code Execution ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | page demonstration """ i=0 whilei\n";...
Mozilla Firefox 3.6.4 - 'Plugin' EnsureCachedAttrParamArrays Remote Code Execution
''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | page demonstration """ i=0 whilei\n"; i=i+1 myStyle = myStyle + """ """ cssFile = open"Abysssec...
CentOS 3 : seamonkey (CESA-2010:0546)
Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
Mandriva Update for firefox MDVSA-2010:147 (firefox)
Check for the Version of firefox OpenVAS Vulnerability Test Mandriva Update for firefox MDVSA-2010:147 firefox Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...