121 matches found
CVE-2013-1710
creationtimestamp| type| source ---|---|--- 2013-08-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30474 2015-10-15 22:07:39+00:00| seen| MISP/56201e1d-f4dc-4ddd-8049-4f2e950d210b 2018-05-29 15:50:33+00:00| seen|...
Firefox toString console.time Privileged Javascript Injection
This exploit gains remote code execution on Firefox 15-22 by abusing two separate Javascript-related vulnerabilities to ultimately inject malicious Javascript code into a context running with chrome:// privileges. Module Options msf use exploit/multi/browser/firefox/tostringconsoleinjection msf...
Ubuntu Update for glance USN-1710-1
Check for the Version of glance OpenVAS Vulnerability Test $Id: gbubuntuUSN17101.nasl 8526 2018-01-25 06:57:37Z teissa $ Ubuntu Update for glance USN-1710-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...
Ubuntu 11.10 / 12.04 LTS / 12.10 : glance vulnerability (USN-1710-1)
Dan Prince discovered an issue in Glance error reporting. An authenticated attacker could exploit this to expose the Glance operator's Swift credentials for a misconfigured or otherwise unusable Swift endpoint. Note that Tenable Network Security has extracted the preceding description block...
Oracle WebCenter Forms Recognition Sssplt30.ocx Arbitrary File Creation (CVE-2012-1710)
A directory traversal vulnerability has been reported in Oracle WebCenter Forms Recognition...
Design/Logic Flaw
Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1710...
CVE-2012-1710
CVE-2012-1710 affects Oracle WebCenter Forms Recognition in Oracle Fusion Middleware 10.1.3.5. Multiple ActiveX components (CroProj.dll and Sssplt30.ocx) are vulnerable to directory-traversal flaws that can allow arbitrary file creation/overwrite when a user visits a crafted page. This enables re...
CVE-2011-1710
The CVE-2011-1710 entry describes multiple integer overflows in the HTTP server of the Novell XTier framework 3.1.8, enabling remote attackers to cause a denial of service (service crash) or possibly execute arbitrary code via crafted header length variables. Public documents identify affected so...
CVE-2010-1710
Directory traversal vulnerability in login.php in Siestta 2.0, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the idioma parameter...
CVE-2010-1710
CVE-2010-1710 affects Siestta 2.0 and earlier. A directory traversal vulnerability exists in login.php when register_globals is enabled, allowing remote attackers to include and execute arbitrary local files by manipulating the idioma parameter with a .. sequence. The NVD CVSS base score is 6.8 (...
Apple Safari Multiple Vulnerabilities June-09 (Windows) - I
This host is installed with Apple Safari Web Browser and is prone to to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnjun091.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari Multiple Vulnerabilities June-09 Windows - I Authors: Sharath S Copyright: Copyright c...
CVE-2009-1710
WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of 1 the host name, 2 security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property...
CVE-2009-1710
WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of 1 the host name, 2 security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property...
CVE-2009-1710
CVE-2009-1710 affects Apple Safari/WebKit prior to version 4.0. Q: What’s vulnerable? WebKit’s handling of a modified CSS3 hotspot property combined with a custom cursor can spoof the browser UI—host name, security indicators, and other UI elements. Impact: remote attackers could deceive users by...
Debian Security Advisory DSA 1710-1 (ganglia-monitor-core)
The remote host is missing an update to ganglia-monitor-core announced via advisory DSA 1710-1. OpenVAS Vulnerability Test $Id: deb17101.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1710-1 ganglia-monitor-core Authors: Thomas Reinke Copyright: Copyright ...
Debian DSA-1710-1 : ganglia-monitor-core - buffer overflow
Spike Spiegel discovered a stack-based buffer overflow in gmetad, the meta-daemon for the ganglia cluster monitoring toolkit, which could be triggered via a request with long path names and might enable arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
CVE-2008-1710
CVE-2008-1710 describes an untrusted search path vulnerability in the IBM AIX 6.1 component chnfsmnt that lets local users escalate privileges by modifying the PATH environment variable. The NVD entry assigns a CVSS v2 base score of 7.2 (HIGH) with local access, low attack complexity, and complet...
CVE-2007-1710
The CVE-2007-1710 issue affects PHP’s readfile function in versions 4.4.4, 5.1.6, and 5.2.1, where an attacker can bypass safe_mode and read arbitrary local files by using a php://… URL syntax (e.g., php://../../…). This is a local-privilege-context vulnerability enabling partial disclosure of in...
CVE-2002-1710
BasiliX Webmail 1.1.0 (or lower) contains an Arbitrary File Disclosure vulnerability in the attachment handling of Compose Mail. The PHP-based script accepts a list of attachment names from the client but does not verify that those attachments were actually uploaded, allowing an attacker to retri...
CVE-2004-1710
The CVE-2004-1710 entry describes a remote command execution vulnerability in page.cgi, exploitable by sending shell metacharacters via the url parameter. The available sources do not specify affected products, versions, root cause specifics beyond the described command-injection vector, or concr...