Fedora Update for xmms FEDORA-2011-9413

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 14 : xmms-1.2.11-15.20071117cvs.fc14 (2011-9421)

fix CVE-2007-0653 better late than never, huh? fix alsa output plugin loop fix desktop file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 15 : xmms-1.2.11-15.20071117cvs.fc15 (2011-9413)

fix CVE-2007-0653 better late than never, huh? fix alsa output plugin loop fix desktop file Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

phpcms2008-0day & phpcms 2 0 0 7 GBK version 0day injection scan script-vulnerability warning-the black bar safety net

Affected program: phpcms2008 gbk Vulnerability file: ask/searchajax.php code: ? php require './ include/common.inc.php'; requireonce MODROOT.'include/ask.class.php'; $ask = new ask; header'Content-type: text/html; charset=utf-8'; ifvia strtolowerCHARSET != 'utf-8' $q = iconvCHARSET, 'utf-8', $q;...

RedHat Update for sysstat RHSA-2011:1005-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Cisco VPN Client cvpnd.exe Privilege Escalation

The Cisco VPN client installed on the remote host has a privilege escalation vulnerability. cvpnd.exe, which is executed by the Cisco VPN Service, has insecure permissions. A local attacker could replace this file with arbitrary code, which would later be executed by the Cisco VPN Service,...

Code injection

The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions NT AUTHORITY\INTERACTIVE:F for cvpnd.exe, which allows local users to gain privileges by replacing this executable file with an arbitrary program, aka Bug ID CSCtn50645. NOTE: this vulnerability exist...

CVE-2011-2678

The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions NT AUTHORITY\INTERACTIVE:F for cvpnd.exe, which allows local users to gain privileges by replacing this executable file with an arbitrary program, aka Bug ID CSCtn50645. NOTE: this vulnerability exist...

CVE-2011-1276

Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code or cau...

CVE-2011-1280

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express SSMSE 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrar...

JustSystems Ichitaro Memory Management Program Remote Heap Buffer Overflow Vulnerability

Description JustSystems Ichitaro is prone to a remote buffer-overflow vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Word 'wdGetApplicationObject()'远程代码执行漏洞

Bugtraq ID: 48261 Microsoft word是一款微软开发的文字处理系统。 Microsoft Word wdGetApplicationObject函数存在一个错误，攻击者构建特制的Word文件，诱使用户解析，可导致以用户安全上下文执行任意代码。 Microsoft Word 2010 Microsoft Word 2007 SP2 Microsoft Word 2007 SP1 Microsoft Word 2007 Microsoft Word 2003 SP3 Microsoft Word 2003 SP2 Microsoft Word 2003 SP1...

Microsoft Excel存在多个安全漏洞

Bugtraq ID: 48164, 48161, 48160, 48159, 48157, 48162, 48163 CVE ID：CVE-2011-1272 CVE-2011-1273 CVE-2011-1274 CVE-2011-1275 CVE-2011-1276 CVE-2011-1277 CVE-2011-1278 CVE-2011-1279 Microsoft Excel是一款微软开发的电子表格处理程序。 Microsoft Excel存在多个安全漏洞，允许攻击者以应用程序上下文执行任意代码或使应用程序崩溃。 -当解析某些记录结构时存在输入验证错误，可被利用破坏内存。...

PT-2011-2990 · Microsoft · Sharepoint Foundation +5

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 7 through 8 Office SharePoint Server versions 2007 SP2 through 2010 SP1 Groove Server versions 2010 Gold through 2010 SP1 Windows SharePoint Services version 3.0 SP2 SharePoint Foundation versions 2010 Gol...

Oracle HTTP Server XSS Header Injection

Exploit for multiple platform in category web applications Attack Pattern ID : CAPEC-86 CWE ID : CI-79 OWASP IDs : A1-Injections, A2-Cross Site Scripting XSS CVE ID : not yet Related CVEs : CVE-2006-3918, CVE-2007-0275 A.K.A : Unfiltered Header Injection Product Type : Application Vendor : Oracle...

Microsoft PowerPoint远程代码执行漏洞

Bugtraq ID: 47700，47699 CVE ID：CVE-2011-1269 CVE-2011-1270 Microsoft PowerPoint是一款微软开发的演示文稿播放处理软件。 Microsoft Office PowerPoint存在多个安全漏洞，允许攻击者以应用程序上下文执行任意代码。 -当调用某些函数时存在未明错误，可导致内存破坏。 -当解析PowerPoint文件时存在未明错误，可导致内存破坏。 成功利用漏洞可以以应用程序上下文执行任意代码。 Microsoft Office 2003 Professional Edition Microsoft Office...

Microsoft Office PowerPoint Remote Code Execution Vulnerabilities (2545814)

This host is missing a critical security update according to Microsoft Bulletin MS11-036. OpenVAS Vulnerability Test $Id: secpodms11-036.nasl 6523 2017-07-04 15:46:12Z cfischer $ Microsoft Office PowerPoint Remote Code Execution Vulnerabilities 2545814 Authors: Antu Sanadi Copyright: Copyright c...

CVE-2007-6743

The vulnerability CVE-2007-6743 affects IBM Tivoli Directory Server (TDS) 5.2 prior to 5.2.0.5-TIV-ITDS-LA0005. It is a double free bug triggered by search operations that cause recursive filter_free calls, allowing remote authenticated users to cause a denial of service (ABEND). No further explo...

CVE-2007-6742

The vulnerability CVE-2007-6742 affects IBM Tivoli Directory Server (TDS) 5.2 and earlier, where get_filter_list fails to correctly parse certain sub filters. This can allow remote authenticated users to trigger an infinite loop, resulting in a denial of service. Affected component: the get_filte...

FiSH-irssi v0.99 Evil ircd Buffer Overflow (CVE-2007-1397)

Exploit for linux platform in category remote exploits FiSH IRC encryption evil ircd PoC exploit. Abuses CVE-2007-1397 Bad ircd, nasty bnc provider, nicknames over 100 char -- ruin. Runs arbitrary code which which in this case shuts down irssi. Tested on my own compiled FiSH with irssi/fedora/x86...