143 matches found
USN-1822-1: Firefox vulnerabilities
Multiple memory safety issues were discovered in Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox...
Ubuntu 12.10 : linux vulnerability (USN-1671-1)
A flaw was discovered in the Linux kernel's handling of new hot-plugged memory. An unprivileged local user could exploit this flaw to cause a denial of service by crashing the system. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu securit...
CVE-2012-1671
Directory traversal vulnerability in index.php in phpPaleo 4.8b155 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...
CVE-2012-1671
CVE-2012-1671 concerns a directory traversal vulnerability in the phpPaleo application. The issue affects phpPaleo 4.8b155 and earlier, where an attacker can abuse the lang parameter in index.php to cause Local File Inclusion, potentially enabling arbitrary local code execution. The connected doc...
Slackware Advisory SSA:2008-116-01 kdelibs
The remote host is missing an update as announced via advisory SSA:2008-116-01. OpenVAS Vulnerability Test $Id: esoftslkssa200811601.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
Protection against Black Hole Toolkit v1.2.3 Java Array Exploits (CVE-2009-1671; CVE-2012-0507)
A buffer overflow vulnerability has been reported in Sun Java SE Runtime Environment...
'phpPaleo' Local File Inclusion (CVE-2012-1671)
'phpPaleo' Local File Inclusion CVE-2012-1671 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for language handling that allows for local file inclusion using a null-byte attack on the 'lang' GET parameter. II...
phpPaleo Local File Inclusion (CVE-2012-1671)
Exploit for php platform in category web applications 'phpPaleo' Local File Inclusion CVE-2012-1671 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for language handling that allows for local file inclusion using a...
phpPaleo 4.8b156 Local File Inclusion
'phpPaleo' Local File Inclusion CVE-2012-1671 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for language handling that allows for local file inclusion using a null-byte attack on the 'lang' GET parameter. II...
phpPaleo - Local File Inclusion
'phpPaleo' Local File Inclusion CVE-2012-1671 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for language handling that allows for local file inclusion using a null-byte attack on the 'lang' GET parameter. II...
CVE-2012-1671
creationtimestamp| type| source ---|---|--- 2012-04-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18701...
phpPaleo - Local File Inclusion
phpPaleo - Local File Inclusion 'phpPaleo' Local File Inclusion CVE-2012-1671 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for language handling that allows for local file inclusion using a null-byte attack on...
CentOS Update for kernel CESA-2009:1671 centos4 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-1671
CVE-2011-1671 describes a Cross-site Scripting (XSS) vulnerability in Tracks versions 1.7.2, 2.0RC2, and 2.0devel, triggered in the code path app/controllers/todos_controller.rb when accessing PATH_INFO under /todos/tag/. The issue allows remote attackers to inject arbitrary web script or HTML. T...
CVE-2010-1671
CVE-2010-1671 affects hsolinkcontrol in hsolink 1.0.118. The issue is a local-privilege escalation caused by improper handling of shell metacharacters in command-line arguments, demonstrated by the second argument in a down action. Impact is local privilege gain; remediation/fix details are not p...
CentOS Security Advisory CESA-2009:1671 (kernel)
The remote host is missing updates to kernel announced in advisory CESA-2009:1671. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
RedHat Security Advisory RHSA-2009:1671
The remote host is missing updates announced in advisory RHSA-2009:1671. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: a flaw was found in the Realtek r8169 Ethernet driver in the Linux kernel. pciunmapsingle...
openSUSE Security Update : cups (cups-1671)
A use-after-free problem in cupsd allowed remote attackers to crash the cups server CVE-2009-3553. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cups-1671. The text description of this plugi...
openSUSE Security Update : cups (cups-1671)
A use-after-free problem in cupsd allowed remote attackers to crash the cups server CVE-2009-3553. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cups-1671. The text description of this plugi...
CVE-2009-1671
Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment aka JRE 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the 1 setInstallerType, 2 setAdditionalPackages, 3 compareVersion, 4...