CVE-2015-1264

CVE-2015-1264 is a cross-site scripting vulnerability in Google Chrome prior to 43.0.2357.65, triggered when data is mishandled by the Bookmarks feature. The connected documents confirm this flaw affects Chrome and emphasize that exploitation could arise from user-assisted actions to inject scrip...

FreeBSD : chromium -- multiple vulnerabilities (a9d456b4-fe4c-11e4-ad15-00262d5ed8ee)

Google Chrome Releases reports : 37 security fixes in this release, including : - 474029 High CVE-2015-1252: Sandbox escape in Chrome. Credit to anonymous. - 464552 High CVE-2015-1253: Cross-origin bypass in DOM. Credit to anonymous. - 444927 High CVE-2015-1254: Cross-origin bypass in Editing...

RHEL 6 : MRG (RHSA-2013:1264)

Updated kernel-rt packages that fix several security issues and multiple bugs are now available for Red Hat Enterprise MRG 2.3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Apple Mac OS Finder ACL破坏未授权访问漏洞

CVE ID:CVE-2014-1264 Apple Mac OS X是一款苹果公司开发的操作系统。 Apple OS X中的Finder在查看文件ACL信息后没有确保ACL的完整性，允许攻击者利用漏洞访问未授权文件，导致敏感信息泄漏。 0 Mac OS X Mavericks 10.9 Mac OS X Mavericks 10.9.1 厂商补丁： Apple ----- Apple OS X 10.9.2已经修复该漏洞，建议用户下载更新： http://www.apple.com...

CVE-2014-1264

CVE-2014-1264 concerns Finder on Apple OS X (Mavericks 10.9 and 10.9.1) where viewing a file’s ACL could corrupt ACLs, potentially allowing local users to bypass access restrictions. The issue is tied to ACL integrity being not preserved after examining ACL information, enabling opportunistic acc...

CVE-2013-1264

Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kerne...

CVE-2013-1264

CVE-2013-1264 describes a race condition in the Windows kernel driver win32k.sys that enables local privilege escalation and the potential to read arbitrary kernel memory. Affected products/versions include Windows XP (SP2–SP3), Windows Server 2003 (SP2), Windows Vista (SP2), Windows Server 2008 ...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2778344)

This host is missing an important security update according to Microsoft Bulletin MS13-016. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows 'Win32k.sys' CVE-2013-1264 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges and to read arbitrary amounts of kernel memory. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya...

MS13-016: Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2778344)

The Windows kernel on the remote host has several race condition vulnerabilities. A local attacker could exploit any of these vulnerabilities to elevate privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64577; scriptversion"1.11"; scriptcvsdate"Date:...

GOM Media Player 'AVI' File Unspecified Vulnerability - Windows

GOM Media Player is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1264

Unspecified vulnerability in Gretech GOM Media Player before 2.1.37.5091 allows remote attackers to execute arbitrary code via a crafted AVI file...

CVE-2012-1264

CVE-2012-1264 concerns Gretech GOM Media Player before 2.1.37.5091, where an unspecified vulnerability in AVI parsing could allow remote code execution via a crafted AVI file. Connected sources corroborate an AVI file/vector-based issue affecting GOM Media Player on Windows, with later entries de...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : bind9 vulnerability (USN-1264-1)

It was discovered that Bind incorrectly handled certain specially crafted packets. A remote attacker could use this flaw to cause Bind to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

CentOS Update for gstreamer-plugins CESA-2011:1264 centos4 i386

Check for the Version of gstreamer-plugins OpenVAS Vulnerability Test CentOS Update for gstreamer-plugins CESA-2011:1264 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute i...

CVE-2011-1264

Active Directory Certificate Services Web Enrollment (AD CS Web Enrollment) on Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, R2, and R2 SP1 is affected by CVE-2011-1264. The vulnerability is a cross-site scripting (XSS) flaw in the Web Enrollment interface that allows remot...

CVE-2010-1264

CVE-2010-1264 is a denial-of-service vulnerability in Microsoft Windows SharePoint Services 3.0 SP1/SP2 (and related SharePoint products) exploited by sending crafted requests to the Help.aspx page, which can cause the application pool to restart and the web server to become unresponsive. The iss...

CVE-2009-1264

The CVE concerns TYPO3 Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier, where access rights were not properly verified, allowing remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors. Affected versions are 2.5.20 and e...

Fedora Update for kdebase FEDORA-2008-1264

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-1264

CVE-2008-1264 affects the Linksys WRT54G router. The issue is the default FTP password/passwordless-like access using “admin,” which permits remote access to sensitive files (including nvram.cfg, a file listing all HTML documents, and an ELF executable). The available documents describe the vulne...