CVE-2012-1510

Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors...

CVE-2012-1510

CVE-2012-1510 refers to a buffer overflow in the VMware WDDM display driver affecting VMware ESXi/ESX (4.0, 4.1, 5.0) and VMware View prior to 4.6.1. Exploitation could allow a guest OS user to gain guest OS privileges via unspecified vectors. The connected advisories confirm the issue and map it...

VMware View privilege escalation and cross-site scripting

a. VMware Virtual Desktop Display Driver Privilege EscalationThe VMware XPDM and WDDM display drivers contain buffer overflow vulnerabilities and the XPDM display driver does not properly check for NULL pointers. Exploitation of these issues may lead to local privilege escalation on View virtual...

VMSA-2012-0005:VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, ESXi and ESX address several security issues

VMSA-2012-0005.4 VMware vCenter Server, Orchestrator, Update Manager, vShield, vSphere Client, Workstation, Player, ESXi and ESX address several security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2012-0005.4 VMware Security Advisory Synopsis: VMware vCenter Server...

CVE-2011-1510

Affected product: ManageEngine ServiceDesk Plus (SDP) 8.0.x, specifically builds up to 8011. Vulnerability: cross-site scripting (XSS) in SolutionSearch.do via the searchText parameter. Root cause: insufficient sanitization of input leading to arbitrary script/HTML execution in the authenticated ...

CORE-2011-0506 - Multiples Vulnerabilities in ManageEngine ServiceDesk Plus

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Multiples Vulnerabilities in ManageEngine ServiceDesk Plus 1. Advisory Information Title: Multiples Vulnerabilities in ManageEngine ServiceDesk Plus Advisory ID: CORE-2011-0506 Advisory URL:...

Multiples Vulnerabilities in ManageEngine ServiceDesk Plus

Core Security - Corelabs Advisory 1. Advisory Information Title: Multiples Vulnerabilities in ManageEngine ServiceDesk Plus Advisory ID: CORE-2011-0506 Advisory URL: http://www.coresecurity.com/content/multiples-vulnerabilities-manageengine-sdp Date published: 2011-09-14 Date of last update:...

Core Security Technologies Advisory 2011.0506

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Multiples Vulnerabilities in ManageEngine ServiceDesk Plus 1. Advisory Information Title: Multiples Vulnerabilities in ManageEngine ServiceDesk Plus Advisory ID: CORE-2011-0506 Advisory URL:...

BisonFTP Server Remote Buffer Overflow Exploit (MSF)

Exploit for windows platform in category remote exploits Title : BisonFTP Server Remote Buffer Overflow Exploit Author : Veerendra G.G SecPod Technologies www.secpod.com Advisory : http://secpod.org/blog/?p=384 http://secpod.org/msf/bisonserverbof.rb Version : BisonFTP Server 'BisonFTP Server...

CVE-1999-1510

creationtimestamp| type| source ---|---|--- 2011-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17649 2011-09-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17810 2018-05-29 15:50:33+00:00| seen|...

CVE-2010-1510

CVE-2010-1510 affects IrfanView prior to 4.27, where parsing PSD images with RLE compression can trigger a heap-based buffer overflow, leading to a possible crash or remote code execution. Public sources consistently describe this in IrfanView’s PSD RLE decompression path, with Secunia citing the...

Secunia Research: IrfanView PSD RLE Decompression Buffer Overflow

====================================================================== Secunia Research 12/05/2010 - IrfanView PSD RLE Decompression Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2009-1510

KoschtIT Image Gallery 1.82 is affected by multiple Directory Traversal vulnerabilities in ki_base/ (ki_makepic.php and ki_nojsdisplayimage.php) that allow remote attackers to include and execute arbitrary local files via crafted directory traversal in the file parameter. Root cause: improper han...

CVE-2009-1510

creationtimestamp| type| source ---|---|--- 2009-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8334...

CVE-2008-1753

Cross-site scripting XSS vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510...

CVE-2008-1510

CVE-2008-1510 describes a Cross-site scripting (XSS) vulnerability in Alkacon OpenCMS 7.0.3, specifically in the page system/workplace/admin/accounts/users_list.jsp. An attacker can inject arbitrary script/HTML via the (1) searchfilter or (2) listSearchFilter parameters, potentially affecting use...

Debian Security Advisory DSA 1510-1 (gs-esp / gs-gpl)

The remote host is missing an update to gs-esp / gs-gpl announced via advisory DSA 1510-1. OpenVAS Vulnerability Test $Id: deb15101.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1510-1 gs-esp / gs-gpl Authors: Thomas Reinke Copyright: Copyright c 2008...

Debian DSA-1510-1 : ghostscript - buffer overflow

Chris Evans discovered a buffer overflow in the color space handling code of the Ghostscript PostScript/PDF interpreter, which might result in the execution of arbitrary code if a user is tricked into processing a malformed file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

Debian: Security Advisory (DSA-1510-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2003-1510

TinyWeb 1.9 is vulnerable to a remote denial-of-service triggered by a crafted HTTP GET request to /cgi-bin/.%00./... that consumes high CPU. Affected component is the web server’s CGI handling; root cause appears to be processing a peculiar path fragment in GET requests (".%%00."). Vendors and s...