Ubuntu 11.10 : linux vulnerabilities (USN-1607-1)

Vadim Ponomarev discovered a flaw in the Linux kernel causing a reference leak when PID namespaces are used. A remote attacker could exploit this flaw causing a denial of service. CVE-2012-2127 A flaw was found in how the Linux kernel's KVM Kernel-based Virtual Machine subsystem handled MSI Messa...

Ubuntu Update for linux-lts-backport-oneiric USN-1594-1

Ubuntu Update for Linux kernel vulnerabilities USN-1594-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN15941.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-lts-backport-oneiric USN-1594-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Ubuntu 10.04 LTS : linux-lts-backport-oneiric vulnerabilities (USN-1594-1)

Vadim Ponomarev discovered a flaw in the Linux kernel causing a reference leak when PID namespaces are used. A remote attacker could exploit this flaw causing a denial of service. CVE-2012-2127 A flaw was found in how the Linux kernel's KVM Kernel-based Virtual Machine subsystem handled MSI Messa...

USN-1594-1: Linux kernel (Oneiric backport) vulnerabilities

Vadim Ponomarev discovered a flaw in the Linux kernel causing a reference leak when PID namespaces are used. A remote attacker could exploit this flaw causing a denial of service. CVE-2012-2127 A flaw was found in how the Linux kernel's KVM Kernel-based Virtual Machine subsystem handled MSI Messa...

CVE-2012-2127

CVE-2012-2127 affects the Linux kernel prior to 3.2, where fs/proc/root.c in procfs does not properly interact with CLONE_NEWPID clone system calls. This can enable a remote attacker to trigger a denial of service via a reference leak and growing memory usage by opening many connections to a PID-...

CVE-2011-2127

Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2117, CVE-2011-2124, and CVE-2011-2128...

Memory corruption

Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-2117, CVE-2011-2124, CVE-2011-2127, and CVE-2011-2128...

CVE-2011-2127

Adobe Shockwave Player before 11.6.0.626 is affected by CVE-2011-2127, which can cause arbitrary code execution or a denial of service via memory corruption through unspecified vectors. The entry is linked with related CVEs in the same family and has high severity (CVSS v2 9.3). The provided docu...

Debian DSA-2127-1 : wireshark - denial of service

A flaw has been found in wireshark, a network protocol analyzer. It was found that the ASN.1 BER dissector was susceptible to a stack overflow, causing the application to crash. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2010-2127

JV2 Folder Gallery 3.1 is vulnerable to a remote file inclusion (RFI) in the lang_file parameter of gallery.php. OpenVAS entries JV2 Folder Gallery 'lang_file' Parameter RFI Vulnerability and JV2 Folder Gallery 'lang_file' Parameter Remote File Inclusion Vulnerability confirm the issue, describin...

openSUSE Security Update : tar (openSUSE-SU-2010:0189-1)

A malicious remote tape server could cause a buffer overflow in tar. In order to exploit that an attacker would have to trick the victim to extract a file that causes tar to open a connection to the rmt server CVE-2010-0624. It's advisable to always use tar's --force-local local option to avoid...

Microsoft Design Tools msdds.dll Memory Corruption (MS05-052; CVE-2005-2127)

Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on the Component Object Model COM technology. There exists a vulnerability in the Microsoft Design Tools Diagram Surface COM object, an object bundled...

CVE-2009-2127

Cross-site scripting XSS vulnerability in showactivity.php in Elvin 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2009-2127

CVE-2009-2127 is a cross‑site scripting (XSS) vulnerability in Elvin 1.2.0 , specifically in the file show_activity.php . The flaw allows remote attackers to inject arbitrary web script or HTML via the id parameter. The referenced CVSSv2 base score is 4.3 (Medium) with network access, user intera...

CVE-2009-2127

creationtimestamp| type| source ---|---|--- 2009-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8953...

CVE-2008-2127

The CVE-2008-2127 entry describes an XSS vulnerability in the CMS Faethon 2.2 Ultimate, exploitable via the what parameter in search.php. The issue allows remote attackers to inject arbitrary script/HTML, with impact limited to partial integrity and no confidentiality/availability loss per the ci...

CVE-2008-2127

creationtimestamp| type| source ---|---|--- 2008-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5558...

CVE-2007-2127

Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.0 have unknown impact and remote attack vectors via 1 Application Object Library APPS04, iStore 2 APPS05 and 3 APPS06, 4 iSupport APPS07, 5 Trade Management APPS09, 6 Applications Manager APPS10, and 7 Oracle Report Manager APPS...

CVE-2007-2127

CVE-2007-2127 relates to multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.0 with remote attack vectors via APPS04/APPS05/APPS06/APPS07/APPS09/APPS10/APPS03 (and related components). The provided documents describe unknown impact and do not provide concrete exploit specifics, a...

CVE-2006-2127

CVE-2006-2127 affects Blog Mod 0.2.x; a SQL injection in weblog_posting.php allows remote attackers to execute arbitrary SQL via the r parameter, with a base risk score of 6.4 (Medium). No explicit remediation or exploit details are provided in the connected documents.