Ubuntu: Security Advisory (USN-857-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-836-1 (webkit)

The remote host is missing an update to webkit announced via advisory USN-836-1. OpenVAS Vulnerability Test $Id: ubuntu8361.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8361.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-836-1 webkit Authors: Thomas Rein...

Ubuntu: Security Advisory (USN-836-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-836-1: WebKit vulnerabilities

It was discovered that WebKit did not properly handle certain SVGPathList data structures. If a user were tricked into viewing a malicious website, an attacker could exploit this to execute arbitrary code with the privileges of the user invoking the program. CVE-2009-0945 Several flaws were...

Apple Safari Multiple Vulnerabilities June-09 (Windows) - I

This host is installed with Apple Safari Web Browser and is prone to to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnjun091.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari Multiple Vulnerabilities June-09 Windows - I Authors: Sharath S Copyright: Copyright c...

CVE-2009-1712

WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element...

CVE-2009-1712

CVE-2009-1712 affects WebKit in qt4-x11 (Qt4 X11) where WebKit does not prevent remote loading of local Java applets via APPLET/OBJECT, potentially allowing an attacker to execute arbitrary code, gain privileges, or access data. Public advisories (e.g., Debian DSA-1988-1, DSA-1950-1) document thi...

CVE-2009-1712

WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element...

CVE-2008-1712

The CVE-2008-1712 issue affects mxBB mx_blogs 2.0.0 beta, where a remote file inclusion vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL in the mx_root_path parameter of includes/functions_weblog.php. This is triggered by a permissive, user-controlled path input, ...

CVE-2007-1712

CVE-2007-1712 affects ActiveWebSoftwares Active Auction Pro 7.1. A SQL injection flaw in default.asp allows remote attackers to execute arbitrary SQL commands via the catid parameter. This can impact database integrity and confidentiality as described. No remediation details are provided in the s...

CVE-2006-1512

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-1712. Reason: This candidate is a reservation duplicate of CVE-2006-1712. Notes: All CVE users should reference CVE-2006-1712 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2006-1712

Cross-site scripting XSS vulnerability in the private archive script private.py in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument...

CVE-2006-1712

Removed by vendor...

CVE-2006-1712

CVE-2006-1712 affects GNU Mailman 2.1.7: the private archive script (private.py) is vulnerable to cross-site scripting (XSS) via the action parameter, allowing remote injection of arbitrary script/HTML that could run in a user’s browser within the vulnerable site’s context. The description is cor...

CVE-2002-1712

Microsoft Windows 2000 is affected by CVE-2002-1712: a remote attacker can cause a denial of service via memory consumption by flooding the NetBIOS port (TCP/139) with empty TCP/IP packets that have ACK and FIN bits set, as shown by stream3. Impact is described as partial availability. The provid...

CVE-2005-1712

CVE-2005-1712 affects Serendipity 0.8; when used with multiple authors, unprivileged authors can upload arbitrary media files. The provided documents state the vulnerability and affected scenario but do not disclose root cause, exploit details, or a remediation. No explicit patch information is g...

CVE-2004-1712

Technical details about CVE-2004-1712 are not publicly provided in the supplied documents; monitor for updates.

CVE-2002-1712

Microsoft Windows 2000 allows remote attackers to cause a denial of service memory consumption by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port TCP/139, as demonstrated by stream3...