85 matches found
CVE-2013-2300
The FlickWnn aka OpenWnn/Flick support application 2.02 and earlier for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem...
CVE-2012-2300
CVE-2012-2300 concerns the Ubercart module for Drupal (versions 6.x-2.x prior to 6.x-2.8 and 7.x-3.x prior to 7.x-3.1). The flaw is a cross-site scripting (XSS) vulnerability that allows remote authenticated users with the administer product classes permission to inject arbitrary web script or HT...
Debian Security Advisory DSA 2300-2 (nss)
The remote host is missing an update to nss announced via advisory DSA 2300-2. OpenVAS Vulnerability Test $Id: deb23002.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2300-2 nss Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Debian DSA-2300-2 : nss - compromised certificate authority
Several unauthorised SSL certificates have been found in the wild issued for the DigiNotar Certificate Authority, obtained through a security compromise with said company. Debian, like other software distributors, has as a precaution decided to disable the DigiNotar Root CA by default in the NSS...
Oracle VM VirtualBox Unspecified Vulnerability (Windows)
This host is installed with Oracle VM VirtualBox and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: secpodoraclevirtualboxunspecifiedvulnwin.nasl 7044 2017-09-01 11:50:59Z teissa $ Oracle VM VirtualBox Unspecified Vulnerability Windows Authors: Sooraj KS Copyright: Copyrig...
CVE-2011-2300
CVE-2011-2300 affects Oracle VM VirtualBox 3.x and 4.0.x (up to 4.0.8) via the Windows Guest Additions. It enables a local user to escalate privileges, impacting confidentiality, integrity, and availability as described in linked advisories. Exploitation details are not provided in the available ...
Google Chrome 'WebKit' Multiple Vulnerabilities (Linux) - Sep 10
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnlin01sep10.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome 'WebKit' Multiple Vulnerabilities Linux - Sep 10 Authors: Sooraj KS Copyright: Copyright c...
Google Chrome 'WebKit' Multiple Vulnerabilities (Windows) - June 10
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnwinjun10.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome 'WebKit' Multiple Vulnerabilities Windows - June 10 Authors: Madhuri D Updated By: Sooraj KS...
CVE-2010-2300
Use-after-free vulnerability in the Element::normalizeAttributes function in dom/Element.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via vectors related to handlers for DOM mutation...
CVE-2010-2300
CVE-2010-2300 is a use-after-free vulnerability in WebKit’s WebCore (Element::normalizeAttributes in dom/Element.cpp) affecting Google Chrome builds prior to 5.0.375.70. The issue can lead to remote code execution or memory corruption via DOM mutation-event handling vectors, per the description. ...
CVE-2010-2300
Removed by vendor...
CVE-2009-2300
The CVE-2009-2300 entry concerns the Phion Airlock Web Application Firewall (WAF) version 4.1-10.41, where the management CGI interface mishandles requests with large width/height parameters for an image. This underlies arbitrary command execution or resource-exhaustion DoS via a crafted request....
CVE-2008-2300
CVE-2008-2300 affects Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials 2.0 and earlier, and Citrix Desktop Server 1.0. The vulnerability allows remote authenticated users to access unauthorized desktops via unknown attack vectors. The connected documents do not provide concret...
CVE-2002-2300
CVE-2002-2300: Buffer overflow in VxWorks ftpd (5.4) on 3Com NBX, affecting NBX 4.0.17 and 4.1.4 with CEL command; remote attacker can crash the FTP server (DoS). Root cause: overflow triggered by a long CEL command. Affected products/components: VxWorks ftpd, 3Com NBX NBX 4.x; exploit details an...
CVE-2007-2300
CVE-2007-2300 affects Endy Kristanto Surat kabar / News Management Online (phpwebnews) 0.2 and earlier. The vulnerability is a Cross-Site Scripting (XSS) flaw in the m_txt parameter that can be exploited via iklan.php, index.php, or bukutamu.php to inject arbitrary web script/HTML. Affected compo...
CVE-2006-2300
CVE-2006-2300 involves multiple SQL injection flaws in EImagePro. The vulnerabilities allow remote attackers to execute arbitrary SQL via (1) CatID in subList.asp, (2) SubjectID in imageList.asp, or (3) Pic in view.asp. Affected software is EImagePro, with the underlying issue being improper hand...
CVE-2005-3661
Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allows remote attackers to reset authentication credentials, then change configuration or firmware, via a direct request to apply.cgi with the Page parameter set to advpassword.asp...
CVE-2005-3661
CVE-2005-3661 describes a vulnerability in the Dell TrueMobile 2300 Wireless Broadband Router. Affected firmware versions include 3.0.0.8 and 5.1.1.6 (and possibly others). The issue allows remote attackers to reset authentication credentials and then modify configuration or upload firmware by se...
CVE-2005-3661
Dell TrueMobile 2300 Wireless Broadband Router running firmware 3.0.0.8 and 5.1.1.6, and possibly other versions, allows remote attackers to reset authentication credentials, then change configuration or firmware, via a direct request to apply.cgi with the Page parameter set to advpassword.asp...
