CVE-2013-1796

The kvmsetmsrcommon function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required timepage alignment during an MSRKVMSYSTEMTIME operation, which allows guest OS users to cause a denial of service buffer overflow and host OS memory corruption or possibly have...

CVE-2013-1796

CVE-2013-1796 affects the Linux kernel KVM MSR_KVM_SYSTEM_TIME handling: the kvm_set_msr_common path in arch/x86/kvm/x86.c does not ensure time_page alignment for MSR_KVM_SYSTEM_TIME when the kernel is

CVE-2010-1796

The AutoFill feature in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4, allows remote attackers to obtain sensitive Address Book Card information via JavaScript code that forces keystroke events for input fields...

CVE-2010-1796

The CVE-2010-1796 issue affects Safari before 5.0.1 on Mac OS X 10.5–10.6 and Windows, and before 4.1.1 on Mac OS X 10.4. An implementation flaw in AutoFill lets a malicious website trigger AutoFill without user action, exposing Address Book Card data via JavaScript keystroke events. The security...

Safari < 4.1.1 / 5.0.1 Multiple Vulnerabilities

Binary data 5617.prm...

Mac OS X : Apple Safari < 5.0.1 / 4.1.1

The version of Apple Safari installed on the remote Mac OS X host is earlier than 5.0.1 / 4.1.1. As such, it is potentially affected by numerous issues in the following components : - Safari - WebKit C Tenable Network Security, Inc. if NASLLEVEL 3000 exit0; include"compat.inc"; if description...

CVE-2004-1796

creationtimestamp| type| source ---|---|--- 2010-04-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12160...

SuSE 11 Security Update : Kerberos 5 (SAT Patch Number 1796)

Specially crafted AES and RC4 packets could allow unauthenticated remote attackers to trigger an integer underflow that leads to heap memory corruption CVE-2009-4212. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Unfixed XSS vulnerability at www.myp2p.eu

Security researcher jath, has submitted on 17/09/2009 a cross-site-scripting XSS vulnerability affecting www.myp2p.eu, which at the time of submission ranked 1796 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2009. It is currently...

CVE-2009-1796

CVE-2009-1796 : The connected sources indicate a cross‑site scripting (XSS) vulnerability in Sun Java System Portal Server versions 6.3.1, 7.1, and 7.2. The issue is triggered by vectors related to an error page, allowing remote attackers to inject arbitrary web script or HTML. The sources do not...

Debian: Security Advisory (DSA-1796-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1796-1 : libwmf - pointer use-after-free

Tavis Ormandy discovered that the embedded GD library copy in libwmf, a library to parse windows metafiles WMF, makes use of a pointer after it was already freed. An attacker using a crafted WMF file can cause a denial of service or possibly the execute arbitrary code via applications using this...

[SECURITY] [DSA 1796-1] New libwmf packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1796-1 [email protected] http://www.debian.org/security/ Nico Golde April 7th, 2009 http://www.debian.org/security/faq -...

Gentoo Security Advisory GLSA 200804-29 (comix)

The remote host is missing updates announced in advisory GLSA 200804-29. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-1796

CVE-2008-1796 affects Comix 3.6.4 and earlier, where temporary directories are created with predictable names, enabling a local user to cause a denial of service. The issue is described in multiple sources (e.g., GLSA 200804-29) as a local DoS due to predictable directory names. Affected package ...

CVE-2007-1796

Multiple unspecified vulnerabilities in JCcorp URLshrink before 1.3.2 have unspecified attack vectors and impact...

CVE-2006-1796

WordPress 1.5.2 (and possibly earlier than 2.0.1) is affected by an XSS in the paging links (template-functions-links.php). The vulnerability allows remote attackers to inject arbitrary script/HTML into IE users via the request URI ($_SERVER['REQUEST_URI']). Impact is cross-site scripting with pa...

Debian DSA-749-1 : ettercap - format string error

A vulnerability was discovered in the ettercap package which could allow a remote attacker to execute arbitrary code on the system running ettercap. The old stable distribution woody did not include ettercap. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2002-1796

ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services...

CVE-2005-1796

CVE-2005-1796 is a format string vulnerability in the Ettercap Ncurses interface (ec_curses.c) that could allow a remote attacker to execute arbitrary code. It affects Ettercap prior to version 0.7.3. Debian advisories confirm a format string error and state upgrades to fix: version 0.7.1-1sarge1...