CVE-2012-1893

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate callback parameters during creation of a hook procedure, which allows local users t...

CVE-2012-1893

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate callback parameters during creation of a hook procedure, which allows local users t...

CVE-2012-1893

CVE-2012-1893 affects a Windows kernel-mode component, specifically the win32k.sys driver. The vulnerability arises from improper validation of callback parameters when creating a hook procedure, enabling local users to escalate privileges by crafting a malicious application. Affected products in...

Microsoft Windows CVE-2012-1893 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Technologies Affected...

CVE-2011-1893

CVE-2011-1893 corresponds to a cross-site scripting (XSS) vulnerability affecting Microsoft SharePoint components: Office SharePoint Server 2010, Windows SharePoint Services 2.0/3.0 SP2, and SharePoint Foundation 2010. The root cause is improper handling of URI parameters, enabling remote attacke...

Microsoft Windows TCP/IP实现IppSortDestinationAddresses()函数整数溢出漏洞（MS10-058）

BUGTRAQ ID: 42254 CVE ID: CVE-2010-1893 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统中TCP/IP实现的IppSortDestinationAddresses函数在处理SOCKETADDRESSLIST 结构时存在整数溢出漏洞，本地用户可以通过调用WSAIoctl和使用SIOADDRESSLISTSORT IOCTL破坏内核内存，以系统级权限执行任意代码。 在IppSortDestinationAddresses函数的开始处存在以下伪代码： DestinationAddresses =...

CVE-2010-1893

CVE-2010-1893 corresponds to an Integer Overflow in the Windows TCP/IP stack that affects Windows Vista SP1, Windows Server 2008 (Gold/R2), and Windows 7. The vulnerability arises when user-mode data is copied to kernel memory, leading to a pool/heap overflow in the IppSortDestinationAddresses/Ip...

Debian DSA-1893-1 : cyrus-imapd-2.2 kolab-cyrus-imapd - buffer overflow

It was discovered that the SIEVE component of cyrus-imapd and kolab-cyrus-imapd, the Cyrus mail system, is vulnerable to a buffer overflow when processing SIEVE scripts. This can be used to elevate privileges to the cyrus system user. An attacker who is able to install SIEVE scripts executed by t...

VMSA-2009-0014 : VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues

a. Service Console update for DHCP and third-party library update for DHCP client. DHCP is an Internet-standard protocol by which a computer can be connected to a local network, ask to be given configuration information, and receive from a server enough information to configure itself as a member...

VMSA-2009-0014:VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues

VMSA-2009-0014.3 VMware ESX patches for DHCP, Service Console kernel, and JRE resolve multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0014.3 VMware Security Advisory Synopsis: VMware ESX patches for DHCP, Service Console kernel, and JRE resolve...

Debian Security Advisory DSA 1893-1 (cyrus-imapd-2.2 kolab-cyrus-imapd)

The remote host is missing an update to cyrus-imapd-2.2 kolab-cyrus-imapd announced via advisory DSA 1893-1. OpenVAS Vulnerability Test $Id: deb18931.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1893-1 cyrus-imapd-2.2 kolab-cyrus-imapd Authors: Thomas...

CVE-2008-1893

creationtimestamp| type| source ---|---|--- 2008-04-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31654...

[SECURITY] [DSA 1285-1] New wordpress packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1285-1 [email protected] http://www.debian.org/security/ Noah Meyerhans May 01, 2007 - ------------------------------------------------------------------------ Package : wordpress Vulnerability...

CVE-2007-1893

xmlrpc xmlrpc.php in WordPress 2.1.2, and probably earlier, allows remote authenticated users with the contributor role to bypass intended access restrictions and invoke the publishposts functionality, which can be used to "publish a previously saved post."...

CVE-2007-1893

CVE-2007-1893 affects WordPress 2.1.2 and earlier: remote authenticated users with the contributor role can bypass access restrictions to invoke publish_posts and publish a previously saved post. Connected advisories indicate this issue was addressed in Debian security updates (DSA-1285-1) with f...

CVE-2006-1893

Cross-site scripting XSS vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2006-1893

CVE-2006-1893 describes a cross-site scripting (XSS) vulnerability in the print.php component of ar-blog 5.2, exploitable via the id parameter to inject arbitrary script/HTML. The vulnerability is documented across multiple sources (NVD, CVE List, PRION, etc.), with the impact described as enabli...

CVE-2002-1893

CVE-2002-1893: Cross-site scripting (XSS) in ArGoSoft Mail Server Pro 1.8.1.9 lets remote attackers inject arbitrary web script/HTML via the e-mail message. Connected sources confirm the vulnerability exists in the WebMail interface of ArGoSoft Mail Server Pro, but the provided documents do not i...

CVE-2005-1893

CVE-2005-1893 affects FlatNuke 2.5.3. The vulnerability arises when a remote attacker supplies invalid parameters to certain scripts, causing an error message that leaks the web document root. The available documents describe the impact as an information disclosure vulnerability (partial confiden...

CVE-2004-1893

CVE-2004-1893 affects Dreamweaver MX. The description states that when “Using Driver On Testing Server” or “Using DSN on Testing Server” is selected, mmhttpdb.asp is uploaded to the site without authentication, allowing remote attackers to obtain sensitive information and potentially execute arbi...