Security fix for the ALT Linux 6 package xen version 4.1.1-alt1

June 15, 2011 Vitaly Kuznetsov 4.1.1-alt1 - 4.1.1 including CVE-2011-1898 fix...

Immunity Canvas: MS10_060

Name| ms10060 ---|--- CVE| CVE-2010-1898 Exploit Pack| CANVAS Description| ms10060 Notes| CVE Name: CVE-2010-1898 VENDOR: Microsoft URL: http://www.microsoft.com/technet/security/bulletin/ms10-060.mspx Notes: This exploit reliably targets .Net 2 through 3.5. DEP/ASLR are not effective at preventi...

CVE-2010-1898

CVE-2010-1898 is a remote code execution vulnerability in the Microsoft .NET CLR handling delegates to virtual methods, affecting CLR-based apps and Silverlight. The issue enables arbitrary code execution via three attack scenarios: XBAPs (XAML browser applications), ASP.NET pages, or standalone ...

MS10-060: Vulnerabilities in the Microsoft .NET Common Language Runtime and in Microsoft Silverlight Could Allow Remote Code Execution (2265906)

The remote Windows host is running a version of the Microsoft .NET Framework and/or Microsoft Silverlight affected by multiple vulnerabilities : - Silverlight improperly handles pointers in an unspecified manner. A remote attacker could exploit this by tricking a user into viewing a web page with...

Debian DSA-1898-1 : openswan - denial of service

It was discovered that the pluto daemon in openswan, an implementation of IPSEC and IKE, could crash when processing a crafted X.509 certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...

Microsoft Works 7 WkImgSrv.dll WKsPictureInterface() ActiveX Exploit

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft Works 7...

Debian: Security Advisory (DSA-1898-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1898

The secure login page in the Administrative Console component in IBM WebSphere Application Server WAS 6.0.2 before 6.0.2.35 does not redirect to an https page upon receiving an http request, which makes it easier for remote attackers to read the contents of WAS sessions by sniffing the network...

CVE-2009-1898

CVE-2009-1898 affects IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.35. The issue is that the secure login page in the Administrative Console does not redirect HTTP requests to HTTPS, enabling a remote attacker to read session contents by sniffing network traffic. Connected sources co...

Microsoft Works 7 WkImgSrv.dll WKsPictureInterface() ActiveX Code Execution

The Microsoft Works ActiveX control WkImgSrv.dll could allow a remote attacker to execute arbitrary code on a system. By passing a negative integer to the WksPictureInterface method, an attacker could execute arbitrary code on the system with privileges of the victim. Change 168430090 /0X0A0A0A0A...

DSquare Exploit Pack: D2SEC_WORKS7

Name| d2secworks7 ---|--- CVE| CVE-2008-1898 Exploit Pack| D2ExploitPack Description| Microsoft Works 7 WkImgSrv.dll ActiveX Remote Code Execution Vulnerability Notes|...

CVE-2008-1898

CVE-2008-1898 affects the WkImgSrv.dll ActiveX control (WksPictureInterface) in Microsoft Works 7 and Microsoft Office 2003/2007. A boundary/argument handling flaw allows remote code execution or browser crash when an invalid WksPictureInterface value is processed, typically via a crafted web pag...

CVE-2008-1898

A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service browser crash via an invalid WksPictureInterface property value, which triggers an improper...

CVE-2008-1898

creationtimestamp| type| source ---|---|--- 2008-04-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5460 2008-05-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5530 2010-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16649 2018-05-29...

Crlf injection

CRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to inject arbitrary e-mail headers via LF %0A sequences in the subject parameter, a related issue to CVE-2007-1898...

CVE-2007-1898

Jetbox CMS 2.1 contains a vulnerability in formmail.php allowing remote attackers to trigger email injection by modifying the recipient, _SETTINGS[allowed_email_hosts][], and subject parameters. The issue is corroborated by multiple sources (NVD CVE-2007-1898 and NetVigilance advisories) and is d...

CVE-2006-1898

CVE-2006-1898 describes multiple cross-site scripting (XSS) vulnerabilities in TinyPHPForum (TPF) 3.6 and earlier. The flaws allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in the profile.php view action and (2) a login name. The documents do not provide ...

CVE-2002-1898

CVE-2002-1898 affects Terminal 1.3 on Apple Mac OS X 10.2. The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link that is opened and executed by Terminal.app. Root cause is improper handling of telnet:// URLs by Terminal.app, enabling command ...

CVE-2004-1898

Monit vulnerability CVE-2004-1898: stack-based buffer overflow in the administration interface affecting Monit 1.4–4.2. Remote attackers can cause arbitrary code execution via a long username.