Solarwinds Dameware Remote Mini Controller Windows service is vulnerable to stack buffer overflow

Overview The Solarwinds Dameware Remote Mini Controller Windows service is vulnerable to stack buffer overflow. Description CWE-121: Stack-based Buffer Overflow - CVE-2016-2345Solarwinds Dameware Remote Mini Controller is a software for assisting in remote desktop connections for helpdesk support...

2345王牌输入法本地权限提升漏洞

Microsoft Windows API使用CreateProcess函数创建新的进程及其主线程。 CreateProcess函数的格式如下： BOOL CreateProcess LPCTSTR lpApplicationName, LPTSTR lpCommandLine, LPSECURITYATTRIBUTES lpProcessAttributes, LPSECURITYATTRIBUTES lpThreadAttributes, BOOL bInheritHandles, DWORD dwCreationFlags, LPVOID lpEnvironment, LPCTST...

Oracle Linux 7 : net-snmp (ELSA-2015-2345)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2345 advisory. - Fixed CVE-2014-3565, snmptrapd died when parsing certain traps 1209361 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle: Security Advisory (ELSA-2015-2345)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2345-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2345-1 advisory. Multiple use-after-free issues were discovered in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially...

CVE-2014-2345

Summary of CVE-2014-2345 : COPA-DATA zenon DNP3 NG driver (DNP3 master) and zenon DNP3 Process Gateway (DNP3 outstation) have an improper input validation flaw that allows remote attackers to trigger a denial of service (infinite loop and process crash) by sending a crafted DNP3 packet over TCP. ...

HP-UX PHSS_43890 : s700_800 11.X OV DP7.00 HP-UX IA/PA - Core patch

s700800 11.X OV DP7.00 HP-UX IA/PA - Core patch : Potential security vulnerabilities have been identified with HP Data Protector. These vulnerabilities could be remotely exploited to allow an increase of privilege, create a Denial of Service DoS, or execute arbitrary code. References: CVE-2013-23...

HP-UX PHSS_43889 : s700_800 11.X OV DP7.00 HP-UX IA/PA - Cell Server patch

s700800 11.X OV DP7.00 HP-UX IA/PA - Cell Server patch : Potential security vulnerabilities have been identified with HP Data Protector. These vulnerabilities could be remotely exploited to allow an increase of privilege, create a Denial of Service DoS, or execute arbitrary code. References:...

COPA-DATA Improper Input Validation

OVERVIEW Automation software company Ing. Punzenberger COPA-DATA GmbH reported an improper input validation vulnerability affecting the DNP3 driver in the zenon SCADA software. The vulnerability was found based on the DNP3 research conducted by Adam Crain of Automatak and Chris Sistrunk of...

CVE-2013-2345

Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1869...

CVE-2013-2345

HP Data Protector (Storage Data Protector) 6.2X is affected by CVE-2013-2345, a remote vulnerability enabling arbitrary code execution or DoS. Affected: HP Storage Data Protector v6.2X on HP-UX 11i, Windows Server 2003/2008, Solaris, Linux. Root cause: remote vulnerability with high impact (CVE-2...

Gentoo Security Advisory GLSA 201111-01 (chromium v8)

The remote host is missing updates announced in advisory GLSA 201111-01. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2011-2345

CVE-2011-2345 affects Google Chrome’s NPAPI implementation prior to 12.0.742.112, where strings are not handled correctly, allowing remote attackers to trigger an out-of-bounds read and cause a denial of service via unspecified vectors. Documented references in OpenVAS/NVD indicate this CVE is pa...

Google Fixes Six High-Risk Bugs in Chrome, Pays Out $6k in Bounties

Google has fixed seven security vulnerabilities in its Chrome browser, including six high-priority flaws. The new release of Chrome is version 12.0.742.112 and also includes an updated version of Flash. The latest version of Chrome is the third major update from the company since just the end of...

CVE-2010-2345

The CVE-2010-2345 entry concerns odCMS 1.06 (potentially earlier) and describes a Cross-Site Request Forgery (CSRF) that can hijack an administrator’s session to perform actions such as changing the administrative password and other unspecified requests. The linked sources in the CVE describe the...

CVE-2009-2345

CVE-2009-2345 concerns Multiple SQL injection vulnerabilities in ClanSphere prior to 2009.0.1. The affected software is ClanSphere; the vulnerable components include the gbook module and unspecified other components. The underlying issue is SQL injection via unknown parameters, allowing remote at...

CVE-2008-2345

The vulnerability CVE-2008-2345 affects the air_filemanager 0.6.0 and earlier TYPO3 extension. The underlying issue is insufficient file filtering that enables remote attackers to execute arbitrary PHP code. The connected documents indicate a high-severity, network-exposed issue with a base CVSS ...

CVE-2007-2345

CVE-2007-2345 affects CodeWand phpBrowse. The vulnerability is a PHP remote file inclusion in include/include_stream.inc.php that allows remote attackers to execute arbitrary PHP code via a URL supplied in the include_path parameter. According to the NVD entry, the flaw yields a CVSS v2 base scor...

CVE-2007-2345

PHP remote file inclusion vulnerability in include/includestream.inc.php in CodeWand phpBrowse allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

CVE-2006-2345

CVE-2006-2345 describes a cross-site scripting (XSS) vulnerability in the AliPAGER 1.5 product, specifically in the file inc/elementz.php. The issue allows remote attackers to inject arbitrary web script or HTML through the ubild parameter. The description notes the provenance is from third‑party...