88 matches found
Apple Safari Multiple Vulnerabilities (Jul 2011) - Mac OS X
Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...
Apple Safari 5.1和5.0.6之前版本多个安全漏洞
BUGTRAQ ID: 48808 CVE ID: CVE-2011-0218,CVE-2011-0221,CVE-2011-0222,CVE-2011-0225,CVE-2011-0232,CVE-2011-0233,CVE-2011-0234,CVE-2011-0235,CVE-2011-0237,CVE-2011-0238,CVE-2011-0240,CVE-2011-0253,CVE-2011-0254,CVE-2011-0255,CVE-2011-1288,CVE-2011-1453,CVE-2011-1457,CVE-2011-1462,CVE-2011-1797...
CVE-2011-1288
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1...
CVE-2011-1288
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1...
CVE-2011-1288
The CVE-2011-1288 vulnerability affects WebKit as used by Apple Safari prior to 5.0.6. A crafted website can cause remote code execution or a Denial of Service via memory corruption and application crashes. This is tied to memory corruption issues in WebKit, with core impact described as arbitrar...
CVE-2010-1288
Buffer overflow in Adobe Shockwave Player before 11.5.7.609 might allow attackers to execute arbitrary code via unspecified vectors...
CVE-2010-1288
CVE-2010-1288 is a buffer overflow in Adobe Shockwave Player prior to version 11.5.7.609 that could allow arbitrary code execution via unspecified vectors. The vulnerability is part of a set of issues targeted by Adobe APSB10-12, affecting Shockwave Player 11.5.6.606 and earlier on Windows and ma...
CVE-2009-1288
Multiple cross-site scripting XSS vulnerabilities in the Advanced Management Module AMM on the IBM BladeCenter, including the BladeCenter H with BPET36H 54, allow remote attackers to inject arbitrary web script or HTML via 1 the username in a login action or 2 the PATH parameter to...
CVE-2009-1288
The CVE-2009-1288 entry describes multiple cross-site scripting (XSS) vulnerabilities in IBM BladeCenter’s Advanced Management Module (AMM), including the BladeCenter H with BPET36H 54. The issues allow remote attackers to inject arbitrary web script or HTML via the username field during login or...
CVE-2009-1288
creationtimestamp| type| source ---|---|--- 2009-04-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32894 2009-04-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32895...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...
Gentoo Security Advisory GLSA 200501-20 (o3read)
The remote host is missing updates announced in advisory GLSA 200501-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-1288
IBM Rational ClearQuest versions 7.0.1.1 and 7.0.0.2 are affected by a vulnerability that could allow local or remote attackers to obtain sensitive information about users by reading user cookies. The connected sources confirm the affected product/version and the impact tied to cookie leakage, bu...
Debian: Security Advisory (DSA-1288-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Solaris finger bug
Hi all: Recently, we monitored a cracker from Eastern Europe, who ran 'finger 9@host' against a Solaris 7 box, and got the following result: Login Name TTY Idle When Where daemon ??? . . . . bin ??? pts/1 Oct 2, 2002 xxx.lbl.gov sys ??? . . . . account1 ??? pts/8 Jul 20, 2000 yyy.lbl.gov account2...
Debian DSA-1288-1 : pptpd - programming error
It was discovered that the PoPToP Point to Point Tunneling Server contains a programming error, which allows the tear-down of a PPTP connection through a malformed GRE packet, resulting in denial of service. The oldstable distribution sarge is not affected by this problem. %NASLMINLEVEL 70300 C...
CVE-2007-1288
Multiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 comment.php, 2 themes.php, 3 directory.php, and 4 sendmsg.php in admin/...
CVE-2007-1288
CVE-2007-1288 describes multiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier. An attacker can execute arbitrary PHP code by supplying a URL to the config[installdir] parameter in admin/ pages (comment.php, themes.php, directory.php, sendmsg.php). Root cause: unt...
CVE-2006-1288
CVE-2006-1288 affects Invision Power Board (IPB) with versions 2.0.4 and 2.1.4 before 20060105. The vulnerability is a SQL injection in multiple entry points where cookies and parameters are not properly sanitized, including ipsclass.php (arrays of id/stamp pairs; keys in key/value arrays), userc...