CVE-2012-2179

creationtimestamp| type| source ---|---|--- 2014-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33725...

Microsoft Remote Desktop Tampering Vulnerability (2969259)

This host is missing an important security update according to Microsoft Bulletin MS14-030. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS14-036: Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution (2967487)

The version of Microsoft's Graphics Component installed on the remote host is affected by code execution vulnerabilities due to the way GDI+ handles image record types in specially crafted files. A remote, unauthenticated attacker could exploit these issues by tricking a user into viewing content...

KLA10013 OSI vulnerability in multiple Microsoft XML Core Services

By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited from the network at a point related to MSXML via a specially designed website. It is caused by a missing property information restriction. Original advisories MS Bulletin...

Microsoft Windows Remote Desktop Protocol CVE-2014-0296 Security Bypass Vulnerability

Description Microsoft Windows Remote Desktop Protocol is prone to a security-bypass vulnerability. Successful exploits may allow an attacker to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Windows...

CVE-2012-5583

CVE-2012-5583 affects the phpCAS library before 1.3.2. The issue is that the client does not verify that the server hostname matches a domain name in the X.509 certificate (CN or SAN), enabling MITM–style spoofing with arbitrary valid certificates. Affected software: phpCAS prior to 1.3.2. Impact...

CVE-2012-5390

The CVE-2012-5390 entry concerns the Condor project: the standard universe shadow component (condor_shadow.std) in Condor versions 7.7.3–7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does not properly check privileges, enabling remote attackers to gain elevated privileges via a crafted standard universe j...

CVE-2012-4728

The CVE-2012-4728 entry is supported by connected sources: Corel Quattro Pro X6 Standard Edition (16.0.0.388 and earlier) is affected by two NULL pointer dereferences in QPW160.dll (QProGetNotebookWindowHandle and Ordinal132) triggered by a crafted QPW file, causing remote denial of service via a...

An Overview of KB2871997

An Overview of KB2871997 Microsoft recently released KB2871997 for Windows 7, Windows 8, Windows Server 2008R2, and Windows Server 2012. This blog will give an overview of the feature changes, their impact, and some important configuration changes that can be made in conjunction with the update t...

Release Information for Veeam Backup & Replication 7 Patch 4

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Veeam Backup & Replication Patch 4 Release Notes Cause Please confirm you are running version 7.0.0.690, 7.0.0.715, 7.0.0.764, 7.0.0.771, 7.0.0.833, 7.0.0.83...

CVE-2012-6142

Session::Cookie in the HTML::EP module 0.2011 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized...

CVE-2012-6141

The CVE-2012-6141 issue affects the Perl App::Context module (versions 0.01–0.968). Root cause: improper handling of Storable::thaw during deserialization. Impact: remote attackers can execute arbitrary code via crafted requests to App::Session::Cookie or App::Session::HTMLHidden, as described in...

CVE-2012-6142

Affected software: HTML::EP module 0.2011 for Perl. The vulnerability is due to the module not properly using Storable::thaw during deserialization, allowing remote attackers to execute arbitrary code via a crafted request. Impact is arbitrary code execution with the described deserialization fla...

CVE-2012-6143

CVE-2012-6143 affects Spoon::Cookie in the Spoon module (Perl) version 0.24. It arises because Storable::thaw is not used safely, enabling remote attackers to execute arbitrary code via a crafted deserialization request. The vulnerability is rated high (CVSSv2 base score 7.5) with network attack ...

CVE-2012-5057

CVE-2012-5057 describes a CRLF injection vulnerability in ownCloud Server

CVE-2012-5336

The CVE-2012-5336 issue affects ownCloud Server versions prior to 4.0.8. The root cause is improper validation of the user_id session variable in lib/base.php, which allows remote authenticated users to read arbitrary files via WebDAV. Affected software: ownCloud Server

CVE-2012-5056

OwnCloud Server prior to 4.0.8 is affected by multiple XSS vulnerabilities. The issues allow remote attackers to inject arbitrary script/HTML via three vectors: (1) readyCallback in apps/files_odfviewer/src/webodf/webodf/flashput/PUT.swf, (2) root parameter to apps/gallery/templates/index.php, an...

Oracle Linux 6 : libtasn1 (ELSA-2014-0596)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0596 advisory. 2.3-6 - added check for null pointer 1102336 2.3-5 - fix various DER decoding issues 1102336 2.3-4 - fix CVE-2012-1569 - missing length check when...

Debian Security Advisory DSA 2947-1 (libav - security update)

Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. A full list of the changes is available at http://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v0.8.12 OpenVAS Vulnerability Test $Id: deb2947.nasl 8972 2018-02-28 07:02:10...

Windows Repository with Data Deduplication error: "The requested operation could not be completed due to a file system limitation"

Article Applicability The error "The requested operation could not be completed due to a file system limitation " can occur for various reasons. This article highlights one possible cause that may occur when a Windows Repository is backed by an NTFS volume that uses Windows Data Deduplication and...