CVE-2017-1784

CVE-2017-1784 affects IBM Cognos Analytics 11.0. The issue allows a local user to read results stored in temporary files containing highly sensitive information. The root cause is described in IBM’s bulletin associated with Cognos Analytics 11.0.x, noting this vulnerability alongside others (CVE-...

CVE-2016-1784

The History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to cause a denial of service resource consumption and application crash via a crafted web site...

CVE-2016-1784

The History implementation in WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to cause a denial of service resource consumption and application crash via a crafted web site...

CVE-2016-1784

CVE-2016-1784 affects WebKit History handling in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2, enabling remote websites to cause resource exhaustion and a crash (DoS). Root cause: flaws in History/web content handling within WebKit. Affected products: iOS Safari/WebKit and tvOS. M...

openSUSE Security Update : libwebkit (openSUSE-SU-2010:0666-1)

The browser engine libwebkit was updated to version 1.2.4 to fix several security bugs. CVE-2010-1781, CVE-2010-1782, CVE-2010-1784, CVE-2010-1785 CVE-2010-1786, CVE-2010-1787, CVE-2010-1788, CVE-2010-1790 CVE-2010-1792, CVE-2010-1793, CVE-2010-2648 %NASLMINLEVEL 70300 C Tenable Network Security,...

Memory corruption

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784,...

CVE-2014-1784

CVE-2014-1784 corresponds to an Internet Explorer memory corruption issue affecting IE 9–11. The connected documents indicate a vulnerability where remote attackers can cause memory corruption via a crafted web site, potentially enabling arbitrary code execution or a denial of service. The provid...

Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : libxslt vulnerability (USN-1784-1)

Nicholas Gregoire discovered that libxslt incorrectly handled certain empty values. If a user or automated system were tricked into processing a specially crafted XSLT document, a remote attacker could cause libxslt to crash, causing a denial of service. Note that Tenable Network Security has...

CVE-2013-1784

CVE-2013-1784 affects the Drupal contributed Clean Theme, specifically the 3-slide gallery. The vulnerability exists in versions prior to Clean Theme 7.x-1.3, where user-entered content on the homepage gallery is not properly sanitized. This allows remote authenticated users who have the administ...

CVE-2013-1784

Cross-site scripting XSS vulnerability in the 3 slide gallery in the Clean Theme before 7.x-1.3 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors...

SA-CONTRIB-2013-030 - Clean Theme - Cross Site Scripting (XSS)

This third-party contributed theme change Drupal's interface. The theme doesn't properly sanitize user-entered content in the 3 slide gallery on the homepage leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker would have to have the...

Fedora Update for keepalived FEDORA-2012-12367

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for keepalived FEDORA-2012-12377

Check for the Version of keepalived OpenVAS Vulnerability Test Fedora Update for keepalived FEDORA-2012-12377 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora Update for keepalived FEDORA-2012-12377

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : keepalived-1.2.5-2.fc17 (2012-12377)

Update to keepalived v1.2.5 stable release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 16 : keepalived-1.2.3-2.fc16 (2012-12367)

Update to keepalived v1.2.3 stable release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Gentoo Security Advisory GLSA 201207-07 (keepalived)

The remote host is missing updates announced in advisory GLSA 201207-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2012-1784

This CVE concerns SQL injection in MyJobList 0.1.3. The vulnerability is triggered via the eid parameter in the profile action to index.php, allowing remote attackers to execute arbitrary SQL commands. The root cause is unsanitized input in the affected parameter, leading to potentially partial t...

CVE-2012-1784

creationtimestamp| type| source ---|---|--- 2012-02-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36882...

CVE-2011-1784

CVE-2011-1784 concerns keepalived 1.2.2 and earlier, where pidfile_write creates /var/run/*.pid files (keepalived.pid, checkers.pid, vrrp.pid) with 0666 permissions. This allows local users to write to these PID files and potentially kill arbitrary processes. Connected advisories show that update...