Fedora Update for drupal6 FEDORA-2012-1283

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1283-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for apt USN-1283-1

Ubuntu Update for Linux kernel vulnerabilities USN-1283-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12831.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for apt USN-1283-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : apt vulnerability (USN-1283-1)

It was discovered that APT incorrectly handled the Verify-Host configuration option. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to steal repository credentials. This issue only affected Ubuntu 10.04 LTS and 10.10. CVE-2011-3634...

Windows CSRSS子系统SrvSetConsoleNumberOfCommand权限提升漏洞(CVE-2011-1283)(MS11-056)

BUGTRAQ ID: 48604 CVE ID: CVE-2011-1283 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows CSRSS子系统的SrvSetConsoleNumberOfCommand实现上存在漏洞，本地攻击者可利用此漏洞在内核模式中执行任意代码。 此漏洞源于CSRSS子系统中的SrvSetConsoleNumberOfCommand函数中的数组索引错误，可被利用从某些内核内存位置读取数据。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows...

CVE-2011-1283

The CVE-2011-1283 entry concerns the Windows CSRSS component in the Win32 subsystem. The vulnerability arises from an array index check flaw in SrvSetConsoleNumberOfCommand, allowing a local attacker to cause memory corruption and elevate privileges by triggering an incorrect memory assignment fo...

MS11-056: Vulnerabilities in Windows Client/Server Run-time Subsystem Could Allow Elevation of Privilege (2507938)

The remote host allows elevation of privileges in its Windows Client/Server run-time subsystem CSRSS. An attacker could exploit these vulnerabilities to run arbitrary code in kernel mode. The attacker must have valid login credentials and be able to log on locally in order to exploit these...

CVE-2010-1283

Adobe Shockwave Player before 11.5.7.609 is affected by CVE-2010-1283 due to a memory corruption flaw while parsing 3D blocks in Director (.dir) files (0xFFFFFF49). Exploitation could allow remote code execution or cause a denial of service. Affected product: Adobe Shockwave Player. Remediation: ...

ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability

ZDI-10-088: Adobe Shockwave Player 3D Parsing Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-088 May 11, 2010 -- CVE ID: CVE-2010-1283 -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player -- TippingPointTM IPS Customer Protection: TippingPoin...

SuSE 11 Security Update : strongswan (SAT Patch Number 1283)

The previous fix for a flaw in the ASN.1 parser was incomplete and had to be reworked. CVE-2009-2661 This could lead to crashes of the pluto IKE daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

glFusion lib-session.php模块SQL注入漏洞

BUGTRAQ ID: 34361 CVECAN ID: CVE-2009-1282,CVE-2009-1283 glFusion是一个开源的内容管理系统。 glFusion的private/system/lib-session.php模块没有正确地过滤用户所提交的glfsession cookie参数，远程攻击者可以通过向服务器提交恶意请求执行SQL注入攻击。以下是/private/system/lib-session.php 的97-117行的有漏洞代码段： ... if isset $COOKIE$CONF'cookiesession' $sessid = COMapplyFilt...

CVE-2009-1283

glFusion before 1.1.3 performs authentication with a user-provided password hash instead of a password, which allows remote attackers to gain privileges by obtaining the hash and using it in the glfpassword cookie, aka "User Masquerading." NOTE: this can be leveraged with a separate SQL injection...

CVE-2009-1283

creationtimestamp| type| source ---|---|--- 2009-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8347...

FreeBSD Security Advisory (FreeBSD-SA-06:12.opie.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:12.opie.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-06:12.opie.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:12.opie.asc ADV FreeBSD-SA-06:12.opie.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

CVE-2008-1283

CVE-2008-1283 describes a cross-site scripting (XSS) vulnerability in Neptune Web Server 3.0. The issue arises from how the server handles the URI when generating the 404 error page, allowing remote attackers to inject arbitrary web script or HTML that could be executed in a user’s browser. The a...

CVE-2008-1283

creationtimestamp| type| source ---|---|--- 2008-03-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31362...

Debian Security Advisory DSA 1283-1 (php5)

The remote host is missing an update to php5 announced via advisory DSA 1283-1. OpenVAS Vulnerability Test $Id: deb12831.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1283-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2006-1283

CVE-2006-1283 affects FreeBSD’s OPIE integration (opiepasswd) where getlogin(2) may return root for unprivileged users, allowing an attacker to configure OPIE for the root account and potentially gain root privileges if root login is permitted via sshd or wheel-group access. Affected: FreeBSD 4.1...

CVE-2003-1283

KaZaA Media Desktop (KMD) 2.0 launches advertisements in the Internet Explorer local security zone, which could allow a remote attacker to view local files and possibly execute arbitrary code. The issue centers on how KMD interacts with the IE zone privileges, as described across multiple sources...