156 matches found
Ubuntu: Security Advisory (USN-1747-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 11.10 / 12.04 LTS / 12.10 : transmission vulnerability (USN-1747-1)
It was discovered that Transmission incorrectly handled certain micro transport protocol packets. A remote attacker could use this issue to cause a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from...
Design/Logic Flaw
Unspecified vulnerability in the Network Layer component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3, when running on Windows, allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2012-1747...
CVE-2012-1747
CVE-2012-1747 affects Oracle Database Server on Windows (versions 10.2.0.3/10.2.0.4/10.2.0.5/11.1.0.7/11.2.0.2/11.2.0.3). The Network Layer component is implicated in an unspecified vulnerability that allows remote attackers to impact availability via unknown vectors (distinct from CVE-2012-1746)...
Ubuntu Update for linux USN-1170-1
Ubuntu Update for Linux kernel vulnerabilities USN-1170-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11701.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux USN-1170-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...
CVE-2011-1747
CVE-2011-1747 affects the Linux kernel AGP subsystem (2.6.38.5 and earlier). The vulnerability stems from inadequate restriction of memory allocations for AGPIOC_RESERVE and AGPIOC_ALLOCATE ioctls in the AGP driver, allowing a local attacker with access to the video subsystem to induce memory exh...
SuSE 11 Security Update : kdelibs4 (SAT Patch Number 1747)
A KDELibs Remote Array Overrun Arbitrary code execution was fixed. CVE-2009-0689 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...
CVE-2009-1747
CVE-2009-1747 is a SQL injection vulnerability in the 26th Avenue bSpeak 1.10 application. The issue resides in index.php during a post action and can be triggered via the forumid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSSv2 base score of 7....
CVE-2009-1747
creationtimestamp| type| source ---|---|--- 2009-05-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8751...
Debian DSA-1747-1 : glib2.0 - integer overflow
Diego Petteno discovered that glib2.0, the GLib library of C routines, handles large strings insecurely via its Base64 encoding functions. This could possible lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
MS08-016: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (949030)
The remote host is running a version of Microsoft Office that is subject to various flaws that could allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have ...
CVE-2007-4605
CVE-2007-4605 is a PHP remote file inclusion in Virtual War (VWar) prior to or including 1.5.0 R15. The vulnerability is triggered in convert/mvcw.php via the vwar_root parameter, allowing arbitrary PHP code execution. Related connected docs corroborate VWar RFI patterns affecting multiple script...
CVE-2007-1747
CVE-2007-1747 concerns a remote code execution in Microsoft Office via a malformed drawing object parsed by MSO.dll. The vulnerability affects multiple Office versions across platforms: Office 2000 SP3, Office 2002 SP3, Office 2003 SP2, Office 2004 for Mac, and Office 2007, where parsing a specia...
CVE-2005-1747
CVE-2005-1747 describes multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express (BEA WebLogic 8.1/Express 8.1 up to SP4, and 7.0 up to SP6). The issues allow remote attackers to inject arbitrary script/HTML via login parameters (j_username, j_password), or through p...
CVE-2004-1747
CVE-2004-1747 describes a cross-site scripting (XSS) vulnerability in the NetworkEverywhere NR041 router firmware 1.2 Release 03. The vulnerability arises from accepting input via the DHCP HOSTNAME option, which can be reflected into the web UI, allowing remote attackers to inject arbitrary web s...
