CVE-2011-5086

The CVE-2011-5086 issue affects Unitronics UniOPC Server prior to version 2.0.0, arising from the IPWorks! SSL component (https50.ocx) not properly implementing a function. This can be triggered remotely via a crafted web site, leading to a crash and potentially arbitrary code execution. Affected...

Google Chrome < 18.0.1025.151 Multiple Vulnerabilities (Apr 2012) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome < 18.0.1025.151 Multiple Vulnerabilities (Apr 2012) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : kernel (RHSA-2012:0481)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0481 advisory. - kernel: sysctl: restrict write access to dmesgrestrict CVE-2011-4080 - kernel: block: CLONEIO iocontext refcounting issues CVE-2012-0879 -...

CVE-2011-2478

Summary of CVE-2011-2478 : Google SketchUp prior to 8.0 is affected by a remote code execution vulnerability in the handling of edge geometry in SKP files. A crafted .SKP file may cause arbitrary code execution within the SketchUp process (untrusted file). Affected product/version: SketchUp befor...

(RHSA-2012:0488) Important: rhev-hypervisor5 security and bug fix update

The rhev-hypervisor5 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine KVM hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Re...

InduSoft Web Studio Remote Agent Buffer Overflow (CVE-2011-4052)

A remote code execution vulnerability has been reported in InduSoft Web Studio Remote Agent component. The vulnerability is due to insufficient boundary check of user supplied data using a certain operation. A remote attacker may exploit this issue by sending a specially crafted request to port...

Flexera InstallShield DoFindReplace Multiple Heap Buffer Overflows (CVE-2011-3174)

Multiple heap buffer overflow vulnerabilities have been reported in Flexera Software InstallShield...

VideoLAN VLC MKV Memory Corruption (CVE-2011-0531)

A memory corruption vulnerability has been reported in VideoLAN VLC player...

Trend Micro Control Manager CmdProcessor.exe AddTask Stack Buffer Overflow (CVE-2011-5001)

A stack buffer overflow vulnerability has been reported in Trend Micro Control Manager...

CentOS 6 : tomcat6 (CESA-2012:0475)

Updated tomcat6 packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

CA Total Defense Suite UNCWS getDBConfigSettings Credential Information Disclosure (CVE-2011-1655)

An information disclosure vulnerability has been reported in CA Total Defense Suite. The vulnerability is due to insufficient access control when handling requests to the getDBConfigSettings web method. A remote attacker may exploit this vulnerability by sending a specially crafted SOAP xml to th...

CVE-2011-4828

creationtimestamp| type| source ---|---|--- 2012-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18738 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vcmsupload.rb 2025-02-06 03:13:40+00:00| seen|...

CVE-2011-1779

Multiple use-after-free vulnerabilities in libarchive 2.8.4 and 2.8.5 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted 1 TAR archive or 2 ISO9660 image...

CVE-2011-1777

CVE-2011-1777 describes two heap-based buffer overflow flaws in libarchive’s ISO9660 handling (archive_read_support_format_iso9660.c: heap_add_entry and relocate_dir) that could crash the application or allow arbitrary code execution via a crafted ISO9660 image. Affected versions are libarchive u...

CVE-2011-1779

CVE-2011-1779 concerns libarchive 2.8.4/2.8.5, with multiple use-after-free vulnerabilities that could be triggered by crafted TAR archives or ISO9660 images. Impact per the sources: remote denial of service (application crash) and possibly other unspecified effects. The provided documents do not...

CVE-2011-1778

CVE-2011-1778 is a libarchive vulnerability (affecting libarchive up to 2.8.5) described as two heap-based buffer overflows triggered by archiving inputs such as tar (and, per Scientific Linux, ISO9660 images). A remote attacker could cause an application crash or, possibly, execute arbitrary cod...

CVE-2011-4881

The vulnerability CVE-2011-4881 affects Certec webMI2ADS (aka webMI) prior to version 2.0.2. The web server does not properly check return values from functions, allowing a remote attacker to cause a denial of service via a crafted HTTP request, specifically a NULL pointer dereference. Affected p...

CVE-2011-4874

CVE-2011-4874 affects MICROSYS PROMOTIC before 8.1.7. A use-after-free in handling a crafted project file (.pra) can lead to arbitrary code execution or data corruption with application crash. Affected products: PROMOTIC versions prior to 8.1.7. Exploitation is not remotely exploitable per ICS-CE...

CVE-2011-4883

The vulnerability (CVE-2011-4883) affects Certec atvise webMI2ADS (aka webMI) prior to version 2.0.2. The web server does not properly validate values in HTTP requests, allowing remote attackers to cause a denial of service through a crafted request, impacting availability. The issue is documente...