73 matches found
ZDI-09-070: Microsoft Internet Explorer Event Object Type Double-Free Vulnerability
ZDI-09-070: Microsoft Internet Explorer Event Object Type Double-Free Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-070 October 13, 2009 -- CVE ID: CVE-2009-2530 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer 6 Microsoft Internet Explorer 7...
Internet Explorer Uninitialized Object Memory Corruption (MS09-054; CVE-2009-2530)
Microsoft Internet Explorer is the most widely used Internet browser. A remote code execution vulnerability exists in Internet Explorer. When Internet Explorer attempts to access an object that has not been initialized or has been deleted, it may corrupt memory in such a way that an attacker coul...
CVE-2008-2530
CVE-2008-2530 concerns multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS. The issues allow remote attackers to inject SQL via specific parameters: nr to frontend/news.php; id to frontend/events3.php and frontend/videos2.php; y to frontend/events2.php; and ser to frontend/f...
CVE-2008-2530
creationtimestamp| type| source ---|---|--- 2008-05-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5588...
CVE-2007-2530
The CVE-2007-2530 entry describes multiple PHP remote file inclusion vulnerabilities in Tropicalm Crowell Resource 4.5.2. The issue arises from lack of sanitization for user-supplied data in the RESPATH parameter, enabling an attacker to supply a URL to either dosearch.php or printfriendly.php an...
CVE-2005-2530
CVE-2005-2530 is an unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X that allows an untrusted applet to gain privileges via Mac OS X specific extensions. Affected component: Java for Mac OS X 1.3.1 (and possibly 1.4.2 per Nessus plugin reference). Impact: elevated privile...
CVE-2006-2530
avatarupload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product...
CVE-2006-2530
avatarupload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product...
CVE-2006-2530
CVE-2006-2530 affects Avatar MOD 1.3 for Snitz Forums 3.4 (and possibly other versions). The issue arises in avatar_upload.asp where remote attackers can bypass file type checks and upload arbitrary files by inserting a null byte in the file name. This constitutes an input validation bypass in th...
CVE-2005-2530
Unspecified vulnerability in Java 1.3.1 before 1.3.116 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specific extensions."...
CVE-2004-2530
CVE-2004-2530 affects the Gadu-Gadu client. The issue is a visual truncation vulnerability in file name handling that lets remote attackers spoof the file extension of transmitted files by using a filename with many spaces before the real extension, which is not shown in the dialog. Impact stated...
Mac OS X : Java for Mac OS X 1.3.1 and 1.4.2 Release 2 Multiple Vulnerabilities
The remote host is missing a security bugfix for Java 1.4.2 and 1.3.1. This update fixes several security vulnerabilities that may allow a Java applet to escalate its privileges. To exploit these flaws, an attacker would need to lure an attacker into executing a rogue Java applet. C Tenable Netwo...