Debian: Security Advisory (DSA-3548-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows and Samba may allow spoofing of authenticated users ("Badlock")

Overview The Security Account Manager Remote SAMR and Local Security Authority Domain Policy LSAD protocols do not properly establish Remote Procedure Call RPC channels, which may allow any attacker to impersonate an authenticated user or gain access to the SAM database, or launch denial of servi...

Microsoft Windows RPC Authentication Downgrade (MS16-047: CVE-2016-0128; CVE-2016-2118)

A security bypass vulnerability, also referred to as BadLock, exists in Microsoft Windows clients connecting to Samba Servers. The vulnerability is due to an authentication design weakness...

[security bulletin] HPSBPI03322 rev.1 - HP Access Control Software, Local Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 UPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04649315 Version: 1 HPSBPI03322 rev.1 - HP Access Control Software, Local Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release...

CVE-2015-2118

CVE-2015-2118 affects HP Access Control (AC) Pull Print components (Secure Pull Print / Security Pull Print) for HP AC 12.x–14.x up to 14.1.2. The HP Security Bulletin (HPSBPI03322 rev.1/ rev.2) describes a local unauthorized access vulnerability that could allow an attacker with local access to ...

Adobe Shockwave Player <= 11.5.9.620 (APSB11-17) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.5.9.620 or earlier. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption vulnerabilities affect the 'Dirapi.dll' component that can result in arbitrary code execution. CVE-2011-0317,...

SPIP - CMS < 3.0.9 / 2.1.22 / 2.0.23 - Privilege Escalation

No description provided by source. !/usr/bin/env python Exploit Title: SPIP - CMS 3.0.9 / 2.1.22 / 2.0.23 - Privilege escalation to administrator account from non authenticated user Date: 04/30/2014 Flaw finder : Unknown Exploit Author: Gregory DRAPERI Email: gregory |dot| draperi |at| gmail |dot...

SPIP CMS 2.0.23 2.1.223.0.9 - Privilege Escalation

SPIP CMS 2.0.23 2.1.223.0.9 - Privilege Escalation !/usr/bin/env python Exploit Title: SPIP - CMS " exit baseurl = sys.argv1 login =...

Cisco Prime Security Manager Cross-Site Scripting (CVE-2014-2118)

A cross-site scripting vulnerability has been reported in Cisco Prime Security Manager. The vulnerability is due to lack of sanitation on URL parameters. A remote attacker can exploit this vulnerability by sending a specially crafted request to an affected server...

Cisco Prime Security Manager跨站脚本漏洞

BUGTRAQ ID: 66488 CVECAN ID: CVE-2014-2118 Cisco Prime Security Manager是集中管理Cisco ASA 5500-X系列防火墙的工具。 Cisco Prime Security Manager 即PRSM 9.2.1-2及之前版本在仪表盘相关的HTML文档内存在多个跨站脚本漏洞，这可使远程攻击者注入远程Web脚本或HTML。 0 Cisco Prime Security Manager 9.2.1-2 目前厂商还没有提供补丁或者升级程序： http://www.cisco.com/go/psirt...

CVE-2014-2118

Cisco Prime Security Manager (PRSM) prior to and including version 9.2(.1-2) contains multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML pages. The root cause is insufficient input validation in several dashboard HTML parameters, allowing remote attackers to inject arbi...

DEBIAN-CVE-2013-2118

SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "take editorial control" via vectors related to ecrire/inc/filtres.php...

CVE-2013-2118

SPIP vulnerable versions: 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23. Remote attackers can gain privileges and take editorial control via vectors in ecrire/inc/filtres.php. A fix is available in SPIP 3.0.9, 2.1.22, and 2.0.23 (patched releases). Remediation: upgrade to these...

CVE-2013-2118

SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "take editorial control" via vectors related to ecrire/inc/filtres.php...

CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

CVE-2012-2118

CVE-2012-2118 affects X.Org X11 / xorg-server 1.11 with a format-string vulnerability in LogVHdrMessageVerb() in os/log.c that could cause a denial of service or potentially allow arbitrary code execution via input device name. Public disclosures describe the vulnerability and multiple advisories...

CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

ZDI-11-207: Adobe Shockwave tSAC Chunk String Termination Remote Code Execution Vulnerability

ZDI-11-207: Adobe Shockwave tSAC Chunk String Termination Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-207 June 14, 2011 -- CVE ID: CVE-2011-2118 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave...

CVE-2011-2118

Adobe Shockwave Player is affected by CVE-2011-2118 due to an input-validation vulnerability in the FLV Asset Xtra component, prior to version 11.6.0.626. This vulnerability enables arbitrary code execution. Multiple connected advisories confirm the issue and reference the targeted Shockwave comp...