288 matches found
CVE-2014-1330
WebKit, as used in Apple Safari before 6.1.4 and 7.x before 7.0.4, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-05-21-1...
Microsoft SharePoint远程代码执行漏洞(CVE-2013-1330)(MS13-067)
BUGTRAQ ID: 62221 CVECAN ID: CVE-2013-1330 SharePoint Server是一个服务器功能集成套件,提供全面的内容管理和企业搜索,加速共享业务流程并简化跨界限信息共享。 SharePoint Server处理未分配工作流时MAC存在远程代码执行漏洞,可使远程攻击者在W3WP服务帐号上下文中执行任意代码。 0 Microsoft SharePoint Server 2010 SP1 Microsoft SharePoint Foundation 2010 SP1 厂商补丁: Microsoft ---------...
CVE-2013-1330
CVE-2013-1330 is described as a vulnerability in Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3, SharePoint Server 2010 SP1/SP2, and Office Web Apps 2010 where the EnableViewStateMac attribute is not enabled by default. This permits remote code execution via an unassigned...
MS13-067: Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2834052)
The versions of Office SharePoint Server, SharePoint Server, Windows SharePoint Services, SharePoint Foundation, or Office Web Apps installed on the remote host are affected by multiple vulnerabilities : - A denial of service vulnerability exits that could cause the W3WP process to stop respondin...
Microsoft SharePoint Server MAC Disabled Remote Code Execution (MS13-067; CVE-2013-1330)
A remote code execution vulnerability exists in Microsoft SharePoint Server...
freeFTPd 1.0.10 (PASS Command) - SEH Buffer Overflow Vulnerability
Exploit for windows platform in category remote exploits !/usr/bin/perl freeFTPd 1.0.10 anonymous-auth PASS SEH buffer overflow PoC by Wireghoul - www.justanotherhacker.com Date: 20130820 Tested on: XPSP3 Similar exploits: EDB 23079 1330 1339 Greetz corelan, TecR0C, mrme, jjkakakk if scalar@ARGV ...
CVE-2010-1330
The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted string...
CVE-2010-1330
JRuby prior to 1.4.1 contains an XSS vulnerability in its regex engine when $KCODE is set to 'u'. The flaw occurs because the engine does not properly handle characters immediately after a UTF-8 character, enabling remote attackers to inject crafted strings and execute script in vulnerable contex...
CVE-2010-1330: Improper Neutralization of Input During Web Page Generation
The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted string...
Ubuntu Update for linux-ti-omap4 USN-1330-1
Ubuntu Update for Linux kernel vulnerabilities USN-1330-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13301.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-ti-omap4 USN-1330-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...
CVE-2011-1330
The CVE-2011-1330 issue affects WeblyGo versions 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE. It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available connected documents conf...
CVE-2010-1330 jruby: XSS in the regular expression engine when processing invalid UTF-8 byte sequences
The regular expression engine in JRuby before 1.4.1, when $KCODE is set to 'u', does not properly handle characters immediately after a UTF-8 character, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted string...
CVE-2009-1330
CVE-2009-1330 is a stack-based buffer overflow in Easy RM to MP3 Converter exploitable via a long filename in a playlist (.pls), enabling remote code execution. Public records show a CVSS v2 base score of 9.3 (HIGH) with network access, no authentication, and impacts to confidentiality, integrity...
CVE-2009-1330
creationtimestamp| type| source ---|---|--- 2009-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8404 2009-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8402 2009-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8403 2009-04-13...
CVE-2008-1330
The CVE-2008-1330 issue affects Novell GroupWise for Windows (Windows client API) on GroupWise 7 (before SP3) and GroupWise 6.5 (before SP6 Update 3). The described fault occurs when handling shared folders, allowing remote authenticated users to access non-shared e-mail messages in a mailbox of ...
Debian Security Advisory DSA 1330-1 (php5)
The remote host is missing an update to php5 announced via advisory DSA 1330-1. OpenVAS Vulnerability Test $Id: deb13301.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1330-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian DSA-1330-1 : php5 - several vulnerabilities
Several remote vulnerabilities have been discovered in PHP, a server-side, HTML-embedded scripting language, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1399 Stefan Esser discovered that a buffe...
CVE-2003-1330
Technical details about CVE-2003-1330 are not provided in the connected documents. The initial description summarizes the vulnerability as bypass of e-mail attachment filtering via an undetected attachment. Monitor for official advisories or patches.
KLA10122 SB vulnerability in Comodo Firewall Pro
An unspecified vulnerability was found in Comodo Firewall Pro. By exploiting this vulnerability malicious users can bypass the driver protection for registry keys. This vulnerability can be exploited locally at a point related to OLE NamedPipe. Original advisories - Exploitation Public exploits...
CVE-2006-1330
CVE-2006-1330 : Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL commands via the sid parameter to (1) friend.php or (2) article.php . This entry is referenced by the NVD listing, which assigns a base score of 7.5 (HIGH) with ne...