CVE-2015-1689

CVE-2015-1689 affects Microsoft Internet Explorer 9–11. The connected sources describe a memory corruption vulnerability triggered by visiting a crafted web page, enabling remote code execution or a denial of service. The vulnerability is part of a family with CVE-2015-1705 and is explicitly iden...

Microsoft Internet Explorer Memory Corruption (MS15-043: CVE-2015-1689)

A use-after-free vulnerability has been reported in Microsoft Internet Explorer. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Internet Explorer CVE-2015-1689 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Symantec Norton Internet Security 2004 ActiveX Control Buffer Overflow

No description provided by source. $Id: nis2004get.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Security Advisory-Vulnerability in Image Upload of User-defined Devices to Huawei eSight System

Huawei eSight System is an operation and maintenance system that Huawei develops for next-generation wireless/wired enterprise campus networks, enterprise branches, and data centers. When users adapt new devices for it, the server verifies the format of the files to be uploaded unsuccessfully...

Mozilla Firefox Multiple Vulnerabilities (Jun 2013) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox CVE-2013-1689 Denial of Service Vulnerability

Description Mozilla Firefox is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. This issue is fixed in: Firefox 22 Technologies Affected Mozilla Firefox 10.0 Mozilla Firefox 10.0.1 Mozilla Firefo...

Ubuntu: Security Advisory (USN-1689-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux USN-1689-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN16891.nasl 8448 2018-01-17 16:18:06Z teissa $ Ubuntu Update for linux USN-1689-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Scientific Linux Security Update : mysql on SL6.x i386/x86_64 (20121114)

This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory pages. CVE-2012-1688, CVE-2012-1690, CVE-2012-1703, CVE-2012-2749, CVE-2012-0540, CVE-2012-1689, CVE-2012-1734, CVE-2012-3163,...

CentOS Update for mysql CESA-2012:1462 centos6

Check for the Version of mysql OpenVAS Vulnerability Test CentOS Update for mysql CESA-2012:1462 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Code injection

Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug 59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816, Oracle has not commented on this possibility...

CVE-2012-1689

CVE-2012-1689 affects Oracle MySQL Server up to 5.1.62 and 5.5.22, allowing remote authenticated users to affect availability via unknown vectors related to the Server Optimizer. MiracleLinux AXSA:2012-1036:03 lists CVE-2012-1689 among fixes for MySQL packages, noting mitigations by upgrading to ...

Symantec Norton Internet Security 2004 ActiveX Control Buffer Overflow (CVE-2007-1689)

A remote code execution vulnerability has been reported in Symantec Norton Internet Security 2004. The vulnerability is due to data validation failure by the ISAlertDataCOM ActiveX control. A remote attacker may exploit this vulnerability by enticing an affected user to open a specially crafted...

FreeBSD Ports: rt36

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-1689

CVE-2011-1689 affects Best Practical Solutions RT (2.x–4.0.0rc7), with multiple XSS vulnerabilities allowing remote script injection via unspecified vectors. Public sources confirm RT is vulnerable across listed versions; Debian advisory notes fixes in RT 3.8.x branch (e.g., 3.8.8–7+squeeze1, 3.8...

[BSA-033] Security Update for request-tracker3.8

Jan Wagner uploaded new packages for request-tracker3.8 which fixed the following security problems: CVE-2011-1685 If the external custom field feature is enabled, Request Tracker allows authenticated users to execute arbitrary code with the permissions of the web server, possible triggered by a...

Security fix for the ALT Linux 6 package request-tracker version 3.8.10-alt1

April 19, 2011 Vladimir V Kamarzin 3.8.10-alt1 - 3.8.10. Security fixes: + CVE-2011-1689 + CVE-2011-1688 + CVE-2011-1687 + CVE-2011-1686 + CVE-2011-1685 - Enhance findreq skiplist...

DSA-2220-1 request-tracker3.8 - several

Bulletin has no description...

Symantec Norton Internet Security 2004 - ActiveX Control Buffer Overflow (Metasploit)

$Id: nis2004get.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...