CVE-2012-1832

WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted packet to 1 TCP or 2 UDP port 2001...

WellinTech KingView 6.53 < 2012-03-22 Multiple Vulnerabilities

Binary data scadakingview6532012-03-22.nbin...

HP SNMP Agents < 9.0.0 Multiple Vulnerabilities (HPSBMU02771 SSRT100558) (Red Hat)

The version of the HP SNMP Agents package installed on the remote Red Hat Enterprise Linux host is earlier than 9.0.0 and, as such, potentially affected by the following vulnerabilities : - An unspecified cross-site scripting vulnerability exists. CVE-2012-2001 - An unspecified URL redirection...

Microsoft Word RTF数据处理远程内存破坏漏洞(MS12-029)

BUGTRAQ ID: 53344 CVE ID: CVE-2012-0183 Microsoft Word属于办公软件是微软公司的一个文字处理器应用程序。最初是由Richard Brodie为了运行DOS的IBM计算机而在1983年编写的。 Microsoft Office Word在解析RTF数据时的错误，可被利用破坏内存，以当前用户权限执行任意代码，从而控制用户系统。 0 Microsoft Word 2008 for Mac Microsoft Word 2007 Microsoft Word 2003 Microsoft Word 2001 for Mac 厂商补丁：...

CVE-2012-2001

CVE-2012-2001 is an XSS vulnerability in HP SNMP Agents for Linux prior to 9.0.0 . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Documented base metrics for CVSS are provided (AV:N/AC:M/Au:N/C:N/I:P/A:N, base score 4.3), with the vulnerability c...

Sunway ForceControl SNMP NetDBServer Data Chunk Copy Buffer Overflow

Added: 02/22/2012 BID: 49747 OSVDB: 75798 Background Sunway ForceControl is a Chinese SCADA/HMI software application widely used in China to help run weapons systems, utilities and chemical plants. It is also used to a lesser extent in other countries, including the US. SNMP NetDBServer is one of...

Sunway ForceControl SNMP NetDBServer Data Chunk Copy Buffer Overflow

Added: 02/22/2012 BID: 49747 OSVDB: 75798 Background Sunway ForceControl is a Chinese SCADA/HMI software application widely used in China to help run weapons systems, utilities and chemical plants. It is also used to a lesser extent in other countries, including the US. SNMP NetDBServer is one of...

Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

MySQL < 3.23.33 Multiple Buffer Overflows

The version of MySQL installed on the remote host is affected by the following vulnerabilities : - A buffer overflow in libmysqlclient.so allows a remote attacker to execute arbitrary code via a long host parameter. CVE-2001-1453 - A buffer overflow allows a remote attacker to execute arbitrary...

OpenSSL < 0.9.6b Predictable Random Generator

According to its banner, the remote web server is running a version of OpenSSL that is earlier than 0.9.6b and allows remote attackers to predict the output of the pseudo-random generator. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17745; scriptversion"1.11";...

ZDI-11-290 : Microsoft Internet Explorer SetExpandedClipRect Remote,Code Execution Vulnerability

ZDI-11-290 : Microsoft Internet Explorer SetExpandedClipRect Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-290 October 15, 2011 - -- CVE ID: CVE-2011-2001 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected Vendors: Microsoft - -- Affected Products:...

CVE-2011-2001

Microsoft Internet Explorer 6–9 were vulnerable to a remote code execution via memory corruption in the handling of objects, specifically a logic error in SetExpandedClipRect that could corrupt a vftable pointer in mshtml.dll. Exploitation requires a user to view a malicious page, enabling code e...

Microsoft IE虚拟函数表格内存破坏漏洞(MS11-081)

BUGTRAQ ID: 49966 CVE ID: CVE-2011-2001 Microsoft Internet Explorer简称MSIE，是微软公司推出的一款网页浏览器。 IE在处理虚拟函数表格时在实现上存在内存破坏漏洞，远程攻击者可利用此漏洞远程代码，导致拒绝服务或执行任意指令。 攻击者可以保存使用IE利用漏洞的特制网站，然后诱使用户查看该网站。也可在应用或保存了IE渲染引擎的Office文档中嵌入ActiveX控件。然后利用受控站点存储或接受用户内容或广告，诱使用户点击电子邮件或即时消息的链接转到攻击者网站。 Microsoft Internet Explorer 9.x...

Microsoft Internet Explorer Multiple Vulnerabilities (2586448)

This host is missing a critical security update according to Microsoft Bulletin MS11-081. OpenVAS Vulnerability Test $Id: secpodms11-081.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2586448 Authors: Veerendra G.G Copyright: Copyright c 2011 SecPod...

Internet Explorer Virtual Function Table Memory Corruption (MS11-081; CVE-2011-2001)

A memory corruption vulnerability has been reported in Internet Explorer. The vulnerability is due to an error when handling a certain DOM operation. A remote attacker may exploit this vulnerability by enticing a user to open a malicious web-page. Successful exploitation may cause a memory...

SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure

The version of SunSSH running on the remote host has an information disclosure vulnerability. A design flaw in the SSH specification could allow a man-in-the-middle attacker to recover up to 32 bits of plaintext from an SSH-protected connection in the standard configuration. An attacker could...

MS01-026 Microsoft IIS/PWS CGI Filename Double Decode Command Execution

This module will execute an arbitrary payload on a Microsoft IIS installation that is vulnerable to the CGI double-decode vulnerability of 2001. This module has been tested successfully on: Windows 2000 Professional SP0 EN; Windows 2000 Professional SP1 AR; Windows 2000 Professional SP1 CZ; Windo...

Nmap NSE net: http-vmware-path-vuln

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco IOS HTTP access level authentication bypass

Added: 12/23/2010 CVE: CVE-2001-0537 BID: 2936 OSVDB: 578 Background The Cisco Internetwork Operating System IOS is the operating system used by Cisco routers. Problem A remote attacker could execute arbitrary commands at the highest privilege level level 15 without needing to authenticate by...

Cisco IOS HTTP access level authentication bypass

Added: 12/23/2010 CVE: CVE-2001-0537 BID: 2936 OSVDB: 578 Background The Cisco Internetwork Operating System IOS is the operating system used by Cisco routers. Problem A remote attacker could execute arbitrary commands at the highest privilege level level 15 without needing to authenticate by...