65 matches found
CVE-2016-2075
Cross-site scripting XSS vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-2075
Summary (MODE C): CVE-2016-2075 relates to a stored XSS vulnerability in VMware vRealize Business Advanced and Enterprise 8.x prior to 8.2.5 on Linux. The issue arises from improper validation of user-supplied input, allowing an authenticated, remote attacker to inject arbitrary script/HTML via u...
CVE-2015-2075
SAP BusinessObjects Edge 4.0 is vulnerable to an unauthenticated remote attack that can delete audit events from the auditee queue via the clearData CORBA operation. The root cause is improper authorization (CWE-285) in the CORBA interface, allowing an attacker to instruct the remote auditee to c...
UnrealIRCD 3.2.8.1 Backdoor Command Execution
No description provided by source. $Id: unrealircd3281backdoor.rb 11227 2010-12-05 15:08:22Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
CVE-2014-2075
CVE-2014-2075 affects TIBCO Enterprise Administrator 1.0.0 and Enterprise Administrator SDK 1.0.0. The root cause is failure to properly enforce administrator privileges in the Enterprise Administrator components, which can allow an unprivileged user to execute arbitrary commands with administrat...
TIBCO Security Advisory: February 26, 2014 - TIBCO® EnterpriseAdministrator
TIBCO® Enterprise Administrator Vulnerability Original releasedate: Feb 26, 2014 Last revised: -- CVE-2014-2075 Source: TIBCO Software Inc. TIBCO Enterprise Administrator Vulnerability Original release date: Feb 26, 2014 Last revised: -- Source: TIBCO Software Inc. Systems Affected TIBCO Enterpri...
Ubuntu: Security Advisory (USN-2075-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for linux USN-2075-1
Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN20751.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for linux USN-2075-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...
CVE-2012-2075
Cross-site scripting XSS vulnerability in the Contact Save module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the access site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-2075
CVE-2012-2075 is a Cross-Site Scripting vulnerability in the Drupal Contributed module Contact Save (6.x-1.x) prior to version 6.x-1.5 . The issue arises because the module does not sufficiently filter user-submitted text, allowing a remote authenticated user with the access site-wide contact for...
Google Chrome 'Sandbox' Remote Code Execution Vulnerability (Windows)
The host is installed Google Chrome and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbgooglechromesandboxcodeexecvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Google Chrome 'Sandbox' Remote Code Execution Vulnerability Windows Authors: Madhuri D Copyright:...
CVE-2011-2075
Technical details about CVE-2011-2075 are not publicly disclosed in the provided documents. The sources reference Google Chrome 11 on Windows and remote code execution potential but do not specify vectors, affected components, root cause, or a fix. Monitor for updates.
UnrealIRCd 3.2.8.1 - Backdoor Command Execution (Metasploit)
$Id: unrealircd3281backdoor.rb 11227 2010-12-05 15:08:22Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Debian DSA-2075-1 : xulrunner - several vulnerabilities
Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-0182 Wladimir Palant discovered that security checks in XML processing were insufficiently...
CVE-2010-2075
CVE-2010-2075 affects UnrealIRCd 3.2.8.1, where an externally introduced modification (Trojan Horse) in the DEBUG3_DOLOG_SYSTEM macro allowed remote command execution. The backdoor was present in UnrealIRCd 3.2.8.1 downloads between November 2009 and June 12, 2010. Public references describe a ba...
UnrealIRCd Backdoor
Detection of backdoor in UnrealIRCd. SPDX-FileCopyrightText: 2010 Vlatko Kosturjak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:unrealircd:unrealircd"; ifdescriptio...
CVE-2010-2075
creationtimestamp| type| source ---|---|--- 2010-06-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13853 2010-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16922 2018-05-29 15:50:33+00:00| seen|...
UnrealIRCD 3.2.8.1 Backdoor Command Execution
This module exploits a malicious backdoor that was added to the Unreal IRCD 3.2.8.1 download archive. This backdoor was present in the Unreal3.2.8.1.tar.gz archive between November 2009 and June 12th 2010. Module Options msf use exploit/unix/irc/unreal/ircd3281backdoor msf undefinedircd3281backdo...
CVE-2009-2075
CVE-2009-2075 concerns the Drupal Nodequeue module (5.x before 5.x-2.7 and 6.x before 6.x-2.2). The description states it does not properly restrict access when displaying node titles. The provided documents do not specify the exact root cause, affected files or functions, or concrete attack vect...
