MS15-109: Security Update for Windows Shell to Address Remote Code Execution (3096443)

The remote Windows host is affected by the following vulnerabilities : - A remote code execution vulnerability exists in the Windows shell due to improper handling of objects in memory. A remote attacker can exploit this vulnerability by convincing a user to open a specially crafted toolbar objec...

KLA10674 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Improper information...

Ubuntu: Security Advisory (USN-2515-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2515-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-2515

EMC Documentum D2 3.1 before P24, 3.1SP1 before P02, 4.0 before P11, 4.1 before P16, and 4.2 before P05 does not properly restrict tickets provided by D2GetAdminTicketMethod and D2RefreshCacheMethod, which allows remote authenticated users to gain privileges via a request for a superuser ticket...

CVE-2014-2515

CVE-2014-2515 affects EMC Documentum D2 and its related components. The issue arises from inadequate access control in the D2GetAdminTicketMethod and D2RefreshCacheMethod, allowing a remote, authenticated user to obtain a superuser ticket and escalate privileges. Affected product versions include...

AIX 5.3 TL 0 : iostat (IZ22350)

The iostat command contains an environment variable handling error. A local attacker may exploit this error to execute arbitrary code with root privileges because the command is setuid root. The following files are vulnerable : /usr/bin/iostat. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

AIX 6.1 TL 0 : iostat (IZ22349)

The iostat command contains an environment variable handling error. A local attacker may exploit this error to execute arbitrary code with root privileges because the command is setuid root. The following files are vulnerable : /usr/bin/iostat. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Debian Security Advisory DSA 2515-1 (nsd3)

The remote host is missing an update to nsd3 announced via advisory DSA 2515-1. OpenVAS Vulnerability Test $Id: deb25151.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2515-1 nsd3 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2012-2515

CVE-2012-2515 describes multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control (KeyHelp.ocx 1.2.312) in the KeyWorks KeyHelp Module (HTML Help component). The flaws allow remote code execution via a long string passed to the (1) JumpMappedID or (2) JumpURL methods, affecti...

KLA10300 ACE vulnerability in GE IP products

A buffer overflow was found in GE IP products. By exploiting this vulnerability malicious users can execute arbitrary code and commands. This vulnerability can be exploited remotely via a specially designed input. Original advisories GE IP bulletin Exploitation Malware exists for this...

Fedora Update for PackageKit FEDORA-2011-8943

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for PackageKit FEDORA-2011-8943

Check for the Version of PackageKit OpenVAS Vulnerability Test Fedora Update for PackageKit FEDORA-2011-8943 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Fedora 15 : PackageKit-0.6.15-2.fc15 (2011-8943)

Upstream yum recently changed the behaviour when checking signatures on a package. The commit added a new configuration key which only affects local packages, but the key was set by default to False. - This meant that an end user could install a local unsigned rpm package using PackageKit without...

CVE-2010-2515

Multiple SQL injection vulnerabilities in index.php in the JFaq comjfaq component 1.2 for Joomla!, when magicquotesgpc is disabled, allow 1 remote attackers to execute arbitrary SQL commands via the id parameter, and 2 remote authenticated users with "Public Front-end" permissions to execute...

CVE-2010-2515

CVE-2010-2515 affects Joomla! with the JFaq (com_jfaq) component 1.2. Multiple SQL injection flaws exist in index.php when magic_quotes_gpc is disabled. An unauthenticated remote attacker can exploit the id parameter to run arbitrary SQL commands, and remote authenticated users with "Public Front...

CVE-2010-2515

Multiple SQL injection vulnerabilities in index.php in the JFaq comjfaq component 1.2 for Joomla!, when magicquotesgpc is disabled, allow 1 remote attackers to execute arbitrary SQL commands via the id parameter, and 2 remote authenticated users with "Public Front-end" permissions to execute...

Multiple Vendors KeyHelp ActiveX Control Buffer Overflow (CVE-2012-2515)

A stack-based buffer overflow vulnerability exist in Multiple Vendors KeyHelp ActiveX control. The flaw is due to insufficient boundary checks. A remote attack can exploit this vulnerability by enticing a target user to visit a maliciously crafted web page...

Microsoft Windows内核本地权限提升和拒绝服务漏洞（MS09-058）

BUGTRAQ ID: 36625,36623,36624 CVECAN ID: CVE-2009-2517,CVE-2009-2516,CVE-2009-2515 Windows是微软发布的非常流行的操作系统。 由于错误地将64位至截断为32位值，以及未充分验证用户态传递的某些数据，导致Windows内核中存在权限提升漏洞。成功利用此漏洞的攻击者可以运行任意内核态代码。此外由于内核处理特定异常方式而导致Windows内核中存在拒绝服务漏洞。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista...

CVE-2009-2515

CVE-2009-2515 is a Windows kernel local elevation-of-privilege vulnerability caused by an incorrect truncation of a 64-bit value to 32-bit. The issue affects multiple Windows editions listed in MS09-058 (including Windows 2000 SP4, XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, and Server 2008). An ...