CVE-2016-1627

CVE-2016-1627 affects Google Chrome DevTools before 48.0.2564.109. The vulnerability arises because DevTools does not validate URL schemes and does not ensure that the remoteBase parameter is tied to chrome-devtools-frontend.appspot.com, enabling a remote attacker to bypass access restrictions. A...

Google Chrome < 48.0.2564.109 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 48.0.2564.109. It is, therefore, affected by multiple vulnerabilities as referenced in the 201602stable-channel-update9 advisory. - The Developer Tools aka DevTools subsystem in Google Chrome before 48.0.2564.109 does n...

Oracle: Security Advisory (ELSA-2015-1627)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for glibc CESA-2015:1627 centos5

Check the version of glibc SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882247";...

Oracle Linux 5 : glibc (ELSA-2015-1627)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1627 advisory. - Fix invalid-free when using getaddrinfo and AIIDN CVE-2013-7424, Tenable has extracted the preceding description block directly from the Oracle Linux security...

glibc, nscd security update

CentOS Errata and Security Advisory CESA-2015:1627 Updated glibc packages that fix one security issue are now available for Red Hat Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2015-1627

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."...

CVE-2015-1627

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."...

CVE-2015-1627

CVE-2015-1627 is an Internet Explorer elevation-of-privilege vulnerability affecting IE 7–11. A crafted web page can cause IE to elevate privileges due to an error in how permissions are validated, enabling an attacker to gain higher privileges on the vulnerable system. Public disclosures relate ...

Microsoft Internet Explorer Elevation of Privilege (MS15-018: CVE-2015-1627)

An elevation of privilege vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer validates permissions under specific conditions, potentially allowing script to be run with elevated privileges...

CVE-2013-1627

The CVE-2013-1627 entry describes a directory traversal (CWE-22) in NTWebServer.exe used by Indusoft Studio 7.0 and Advantech Studio 7.0 and earlier. The vulnerability allows remote attackers to read arbitrary files by supplying a full pathname to the sub_401A90 CreateFileW call, enabling potenti...

CVE-2013-1627

creationtimestamp| type| source ---|---|--- 2012-12-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23132...

Ubuntu: Security Advisory (USN-1627-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-1627

Vulnerability: CVE-2012-1627 affects the Drupal Vote Up/Down module (vud_term) 6.x-2.x before 6.x-2.8 and 6.x-3.x before 6.x-3.1. Description: the vud_term sub-module does not sufficiently sanitize taxonomy terms, allowing remote authenticated users to inject arbitrary script/HTML. Impact: XSS vi...

phpBB 3.0.7 feed.php脚本错误权限检查漏洞

CVECAN ID: CVE-2010-1627 phpBB是非常流行的WEB论坛程序。 phpBB的feed.php脚本没有正确地检查订阅源的权限，在以下环境中远程攻击者可以绕过权限检查执行非授权操作： 启用了订阅源 启用了张贴或主题源 非授权用户对私人论坛设置了论坛权限 phpBB 3.0.7 厂商补丁： phpBB Group ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.phpbb.com/community/viewtopic.php?f=14&t=2014195...

CVE-2010-1627

CVE-2010-1627 affects phpBB 3.0.7 before 3.0.7-PL1. The vulnerability in feed.php allows remote attackers to bypass feed permission checks and access restrictions on a private forum via unspecified attack vectors related to permission settings. Evidence across sources (NVD, RH, Ubuntu, GHSA) corr...

SDP Downloader ASX File Heap Buffer Overflow Vulnerability

This host is installed with SDP Downloader and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodsdpdownloaderbofvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ SDP Downloader ASX File Heap Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009...

CVE-2009-1627

CVE-2009-1627 concerns SDP Downloader 2.3.0, where a stack-based buffer overflow in the ASX file handling (long URL in the HREF attribute of a REF element) allows remote attackers to execute arbitrary code. The OpenVAS entries corroborate a heap/buffer overflow vulnerability in SDP Downloader han...

Debian Security Advisory DSA 1627-2 (opensc)

The remote host is missing an update to opensc announced via advisory DSA 1627-2. OpenVAS Vulnerability Test $Id: deb16272.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1627-2 opensc Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1627-2 : opensc - programming error

Chaskiel M Grundman discovered that opensc, a library and utilities to handle smart cards, would initialise smart cards with the Siemens CardOS M4 card operating system without proper access rights. This allowed everyone to change the card's PIN. With this bug anyone can change a user PIN without...