69 matches found
RHEL 6 : sssd and ding-libs (RHSA-2018:1877)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:1877 advisory. The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It...
CVE-2017-1877
CVE-2017-1877 entry is rejected/not used and does not represent an active vulnerability.
[SECURITY] [DLA 217-1] xdg-utils security update
The two below CVE issues have recently been fixed in Debian squeeze-lts: CVE-2014-9622 John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a users preferred application, to execute arbitrary commands remotely. CVE-2015-1877 Jiri Horner discovered a way to cause...
DLA-217-1 xdg-utils - security update
Bulletin has no description...
[SECURITY] [DSA 3165-1] xdg-utils security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3165-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 21, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3165-1] xdg-utils security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3165-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 21, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3165-1] xdg-utils security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3165-1 [email protected] http://www.debian.org/security/ Michael Gilbert February 21, 2015 http://www.debian.org/security/faq -...
CVE-2014-1877
CVE-2014-1877 : Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 2.1.1 allow remote attackers to inject arbitrary web script or HTML via user-supplied input in specific fields: (1) Phone, (2) Street, (3) Address line, (4) Zip code, (5) City (main/auth/profile.php); (6) Subject (main/...
CVE-2013-1877
CVE-2013-1877 is a duplicate of CVE-2013-2616. Connected sources describe the issue as affecting the MiniMagick Gem for Ruby, specifically lib/mini_magick.rb in version 1.3.1, which allows remote attackers to execute arbitrary commands via shell metacharacters in a URL (remote command injection)....
CVE-2012-1877
CVE-2012-1877 is a remote code execution vulnerability in Microsoft Internet Explorer 6–9 caused by improper handling of objects in memory, allowing an attacker to run arbitrary code by accessing a deleted object. Multiple connected sources (including the NVD entry for CVE-2012-1877 and OpenVAS/N...
CVE-2011-1877
CVE-2011-1877 is a Windows kernel‑mode driver use‑after‑free vulnerability in win32k.sys that enables local privilege escalation. The issue arises from incorrect driver object management in the Windows kernel, affecting Windows Vista (SP1/SP2), Windows Server 2008 (Gold, SP2, R2, R2 SP1), and Win...
CVE-2010-1877
SQL injection vulnerability in the JTM Reseller comjtm component 1.9 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter in a search action to index.php...
CVE-2010-1877
SQL injection vulnerability in the JTM Reseller comjtm component 1.9 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter in a search action to index.php...
CVE-2010-1877
The CVE-2010-1877 issue affects Joomla! installations using the JTM Reseller (com_jtm) component 1.9 Beta. The root cause is an SQL injection vulnerability in the author parameter of a search action to index.php, enabling remote attackers to execute arbitrary SQL commands. The connected sources c...
CVE-2010-1877
creationtimestamp| type| source ---|---|--- 2010-04-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12306...
Debian DSA-1877-1 : mysql-dfsg-5.0 - denial of service/execution of arbitrary code
In MySQL 4.0.0 through 5.0.83, multiple format string vulnerabilities in the dispatchcommand function in libmysqld/sqlparse.cc in mysqld allow remote authenticated users to cause a denial of service daemon crash and potentially the execution of arbitrary code via format string specifiers in a...
Adobe ColdFusion Server Load URL Cross-Site Scripting (APSB09-12; CVE-2009-1877)
A Cross Site Scripting XSS vulnerability has been discovered in Adobe ColdFusion server. Adobe ColdFusion is an application server for developing dynamically generated Web sites. A remote attacker could exploit this issue to execute a reflected cross-site scripting attack on web sites using the...
Debian: Security Advisory (DSA-1877-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...