CVE-2009-2099

creationtimestamp| type| source ---|---|--- 2009-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8959...

VMCI/HGFS VmWare Code Execution Vulnerability (Windows)

The host is installed with VMWare products that are vulnerable to arbitrary code execution. OpenVAS Vulnerability Test $Id: gbvmwareprdtsmultvulnwin.nasl 6518 2017-07-04 13:49:06Z cfischer $ VMCI/HGFS VmWare Code Execution Vulnerability Windows Authors: Chandan S Copyright: Copyright c 2008...

CVE-2008-2099

CVE-2008-2099 is a VMware VMCI/HGFS code‑execution vulnerability affecting VMware Workstation 6.x (before 6.0.4 build 93057), VMware Player 2.x (before 2.0.4 build 93057), and VMware ACE 2.x (before 2.0.2 build 93057) on Windows. A guest OS user could potentially execute arbitrary code on the hos...

VMSA-2008-0008 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion resolve critical security issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------- VMware Security Advisory Advisory ID: VMSA-2008-0008 Synopsis: Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion resolve critical security issues Issue date:...

CVE-2007-2099

CVE-2007-2099 affects OpenConcept Back-End CMS 0.4.7. The vulnerability is a cross-site scripting (XSS) in htdocs/php.php via the page[] parameter, allowing remote attackers to inject arbitrary script/HTML. The CVSSv2 vector (AV:N/AC:M/Au:N/C:P/I:P/A:P) yields a base score of 6.8 (MEDIUM) with ne...

CVE-2006-2099

CVE-2006-2099 describes a directory traversal flaw in UltraISO 8.0.0.1392 that lets remote attackers cause arbitrary file writes by placing a .. in a filename inside an ISO image. Affected software is UltraISO; the underlying cause is unvalidated path traversal during ISO processing. The public r...

CVE-2005-2099

CVE-2005-2099 affects the Linux kernel (pre-2.6.12.5) where a keyring that is not instantiated properly is not destroyed, allowing local users or remote attackers to trigger a kernel oops via a payload in the keyring, leading to a denial of service. The affected code path is in the keyring destru...

CVE-2002-2099

The entry concerns CVE-2002-2099 affecting the GNU DataDisplay Debugger (DDD) 3.3.1. The vulnerability is a buffer overflow triggered by a long HOME environment variable, allowing a local user to execute arbitrary code and possibly gain privileges. The root cause is an overflow in DDD’s handling ...

CVE-2004-2099

The vulnerability concerns the Need for Speed Hot Pursuit 2.0 client (NFSHP2), affected through version 242 and earlier. It is a buffer overflow triggered by long commands (gamename, gamever, hostname, gametype, mapname, gamemode) sent by remote servers, allowing arbitrary code execution. The con...

CVE-2004-2099

Buffer overflow in Need for Speed Hot Pursuit 2.0 client NFSHP2, version 242 and earlier, allows remote attackers servers to execute arbitrary code via long 1 gamename, 2 gamever, 3 hostname, 4 gametype, 5 mapname or 6 gamemode commands...