97 matches found
Google Chrome Full Sandbox Escape and Code Execution Vulnerability (MAC OS X)
This host is installed with Google Chrome and is prone to sandbox escape and code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglechromesandboxescpncodeexecvulnmacosx.nasl 6018 2017-04-24 09:02:24Z teissa $ Google Chrome Full Sandbox Escape and Code Execution Vulnerability MA...
Google Chrome Full Sandbox Escape and Code Execution Vulnerability - Linux
Google Chrome is prone to sandbox escape and code execution vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Chrome Full Sandbox Escape and Code Execution Vulnerability (Windows)
This host is installed with Google Chrome and is prone to sandbox escape and code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglechromesandboxescpncodeexecvulnwin.nasl 5912 2017-04-10 09:01:51Z teissa $ Google Chrome Full Sandbox Escape and Code Execution Vulnerability Windo...
CVE-2012-1846
Summary: CVE-2012-1846 affects Google Chrome (notably 17.0.963.66 and earlier) and describes a sandbox bypass that enables remote code execution by abusing access to a sandboxed process. The connected OpenVAS entries reference “Google Chrome Full Sandbox Escape and Code Execution Vulnerability” a...
CVE-2012-1846
Removed by vendor...
CVE-2011-1846
CVE-2011-1846 affects IBM DB2 9.5 before FP7 and 9.7 before FP4 on Linux/UNIX/Windows. The vulnerability arises from failure to properly revoke role membership from groups, allowing remote authenticated users to execute non-DDL statements by leveraging previously inherited possession of a role. T...
Debian DSA-1846-1 : kvm - denial of service
Matt T. Yourst discovered an issue in the kvm subsystem. Local users with permission to manipulate /dev/kvm can cause a denial of service hang by providing an invalid cr3 value to the KVMSETSREGS call. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Debian Security Advisory DSA 1846-1 (kvm)
The remote host is missing an update to kvm announced via advisory DSA 1846-1. OpenVAS Vulnerability Test $Id: deb18461.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1846-1 kvm Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
CVE-2008-1846
The CVE affects SAP NetWeaver prior to 7.0 SP15 where the Always Use Secure HTML Editor (Editor Security) parameter is not enabled by default. This configuration allows remote attackers to perform cross-site scripting (XSS) by entering feedback for a file, as described in the public records. No a...
CVE-2007-1846
CVE-2007-1846 is a SQL injection vulnerability in the MyAds 2.04jp (and earlier) module for Xoops, where the cid parameter can be manipulated to execute arbitrary SQL commands. The vulnerability affects the file index.php within the MyAds module and is described as having different vectors than C...
CVE-2006-1846
Cross-site scripting XSS vulnerability in the YourAccount module in PHP-Nuke 7.8 might allows remote attackers to inject arbitrary HTML and web script via the ublock parameter, which is saved in the user's personal menu. NOTE: the provenance of this information is unknown; the details are obtaine...
CVE-2006-1846
The CVE-2006-1846 entry concerns a cross-site scripting (XSS) issue in PHP-Nuke 7.8 within the Your_Account module. The vulnerability stems from the ublock parameter, which is stored in the user’s personal menu, allowing remote attackers to inject arbitrary HTML/JavaScript. The available document...
CVE-2002-1846
YaBB vulnerable: YaBB 1.40/1.41 allows changing a user’s password without providing the correct password, by leveraging a stolen cookie and submitting a profile2 action to index.php. This lets remote attackers modify the password and adjust the expiretime setting. Root cause is insufficient authe...
CVE-2005-1846
CVE-2005-1846 affects YaMT prior to 0.5_2. Affected component/file handling allows directory traversal via the rename and sort options, enabling an attacker to overwrite arbitrary files. Some sources also note potential arbitrary code execution in affected contexts. Remediation: upgrade YaMT to v...
CVE-2004-1846
CVE-2004-1846 affects News Manager Lite 2.5 with multiple SQL injection flaws allowing remote attackers to execute arbitrary SQL via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp. The sources provided reiterate this vulnerability...