CVE-2015-1345

CVE-2015-1345 covers a local DoS bug in grep’s bmexec_trans function (kwset.c) affecting grep versions 2.19–2.21, exploitable via crafted input when using the -F option. The connected F5 advisory mirrors the vulnerability being associated with the grep utility and lists affected BIG-IP LineRate/g...

openSUSE Security Update : grep (openSUSE-2015-121)

grep was updated to fix one security issue. This security issue was fixed : - Heap buffer overrun with a carefully crafted combination of input and regexp CVE-2015-1345. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Joomla Component com_ckforms Local File Inclusion (CVE-2010-1344; CVE-2010-1345)

A file inclusion vulnerability has been reported in Joomla Com Ckforms. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

APPLE-SA-2014-06-30-1 Safari 6.1.5 and Safari 7.0.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-06-30-1 Safari 6.1.5 and Safari 7.0.5 Safari 6.1.5 and Safari 7.0.5 are now available and address the following: WebKit Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.3 Impact...

CVE-2014-1345

CVE-2014-1345 affects WebKit in Apple iOS < 7.1.2 and Apple Safari < 6.1.5 and

Mac OS X : Apple Safari < 6.1.5 / 7.0.5 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is a version prior to 6.1.5 or 7.0.5. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code...

CVE-2013-1345

CVE-2013-1345 affects the Windows kernel-mode driver component Win32k.sys across multiple Windows/Server editions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7, 8, Server 2012, Windows RT). The vulnerability arises from improper handling of objects in memory within Win32k...

Microsoft Windows Kernel 'Win32k.sys'本地权限提升漏洞(CVE-2013-1345)

BUGTRAQ ID: 60948 CVECAN ID: CVE-2013-1345 Microsoft Windows是微软公司推出的一系列操作系统。 Windows 内核模式驱动程序不正确地处理内存中的对象的方式中存在一个特权提升漏洞。成功利用此漏洞的攻击者可以使用提升的特权执行任意代码。 0 Microsoft Windows Windows XP Service Pack 3 Microsoft Windows Windows Vista x64 Edition Serv Microsoft Windows Windows Vista Service Pack 2 Microso...

Microsoft Windows Kernel 'Win32k.sys' CVE-2013-1345 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers...

Ubuntu: Security Advisory (USN-1345-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ZDI-11-119: &#40;Pwn2Own&#41; Microsoft Internet Explorer onPropertyChange Remote Code Execution Vulnerability

ZDI-11-119: Pwn2Own Microsoft Internet Explorer onPropertyChange Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-119 April 12, 2011 -- CVE ID: CVE-2011-1345 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Microsoft -- Affected Products: Microsoft...

Internet Explorer Object Lifetime Management Memory Corruption (MS11-018; CVE-2011-1345)

A remote code execution vulnerability has been reported in Internet Explorer. A remote attacker could exploit this issue by convincing a user to open a maliciously crafted HTML file with Internet Explorer, which will cause the browser to crash and may allow execution of arbitrary commands. The...

CVE-2011-1345

CVE-2011-1345 is a memory-corruption vulnerability in Microsoft Internet Explorer (IE 6–8) caused by a use-after-free in the CObjectElement::OnPropertyChange path. An attacker can achieve remote code execution by tricking a user into visiting a crafted page; this exploit was demonstrated during P...

CVE-2010-1345

Directory traversal vulnerability in the Cookex Agency CKForms comckforms component 1.3.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1345

This CVE-2010-1345 describes a Local File Inclusion in Joomla! CKForms (com_ckforms) 1.3.3 where an attacker can read arbitrary files via a .. sequence in the controller parameter of index.php. The issue is triggered by directory traversal in the CKForms controller, enabling access to sensitive f...

CVE-2010-1345

Directory traversal vulnerability in the Cookex Agency CKForms comckforms component 1.3.3 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1345

creationtimestamp| type| source ---|---|--- 2010-03-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11785 2010-11-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15453...

SLES9: Security update for squid

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: squid For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015546 within the SuSE...

SLES9: Security update for squid

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: squid For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015546 within the SuSE...

CVE-2009-1345

The vulnerability CVE-2009-1345 affects cpCommerce 1.2.8, specifically the document.php component. It enables a SQL injection via the id_document parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation details or in-the-wild context are not provided in the connected d...