30337 matches found
VulnCheck KEV: CVE-2008-2992
Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution...
DEBIAN-CVE-2008-7251
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors...
CVE-2008-7251
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors...
CVE-2008-7251
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors...
CVE-2008-7251
CVE-2008-7251 concerns phpMyAdmin 2.11.x prior to 2.11.10 creating a temporary directory with 0777 permissions, enabling possible local abuse. Connected sources also reference CVE-2008-7252 (predictable temp file names) and CVE-2009-4605 (setup.php unserialize leading to CSRF). Debian (DSA-2034-1...
CVE-2008-7252
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors...
CVE-2008-7252
CVE-2008-7252 affects phpMyAdmin 2.11.x before 2.11.10, where temporary files are created with predictable filenames due to the implementation in File.class.php. This root cause enables local abuse; Debian and OpenVAS entries describe potential local denial of service or privilege escalation vect...
CVE-2008-7252
libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors...
Mandriva Update for mysql MDVSA-2010:012 (mysql)
Check for the Version of mysql OpenVAS Vulnerability Test Mandriva Update for mysql MDVSA-2010:012 mysql Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Mandriva Update for mysql MDVSA-2010:012 (mysql)
Check for the Version of mysql OpenVAS Vulnerability Test Mandriva Update for mysql MDVSA-2010:012 mysql Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Mandriva Update for mysql MDVSA-2010:011 (mysql)
Check for the Version of mysql OpenVAS Vulnerability Test Mandriva Update for mysql MDVSA-2010:011 mysql Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Microsoft Windows NT/2000/2003/2008/XP/Vista/7 - 'KiTrap0D' User Mode to Ring Escalation (MS10-015)
Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11199.zip KiTrap0D.zip E-DB Note: Make sure to run "vdmallowed.exe" pre-compiled inside the subfolder. Microsoft Windows NT GP Trap Handler Allows Users to Switch Kernel Stack...
Mandriva Update for bash MDVSA-2010:004 (bash)
Check for the Version of bash OpenVAS Vulnerability Test Mandriva Update for bash MDVSA-2010:004 bash Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
USN-886-1: Pidgin vulnerabilities
It was discovered that Pidgin did not properly handle certain topic messages in the IRC protocol handler. If a user were tricked into connecting to a malicious IRC server, an attacker could cause Pidgin to crash, leading to a denial of service. This issue only affected Ubuntu 8.04 LTS, Ubuntu 8.1...
openSUSE Security Update : phpMyAdmin (phpMyAdmin-1801)
The use of unserialize on POST data which could have lead to remote code execution CVE-2009-4605 has been fixed as well as some minor temporary file issues CVE-2008-7251, CVE-2008-7252. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...
[SECURITY] [DSA-1972-1] New audiofile packages fix buffer overflow
------------------------------------------------------------------------- Debian Security Advisory DSA-1972-1 [email protected] http://www.debian.org/security/ Stefan Fritsch January 17, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA-1972-1] New audiofile packages fix buffer overflow
------------------------------------------------------------------------- Debian Security Advisory DSA-1972-1 [email protected] http://www.debian.org/security/ Stefan Fritsch January 17, 2010 http://www.debian.org/security/faq -...
[ MDVSA-2010:004 ] bash
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:004 http://www.mandriva.com/security/ Package : bash Date : January 13, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0, Multi Network Firewall 2.0 Problem Description: A...
Cross site scripting
Cross-site scripting XSS vulnerability in the KJ: Imagelightbox kjimagelightbox2 extension 2.0.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-2490...
Memory corruption
Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessin...