Debian DSA-2557-1 : hostapd - buffer overflow

Timo Warns discovered that the internal authentication server of hostapd, a user space IEEE 802.11 AP and IEEE 802.1X/WPA/WPA2/EAP Authenticator, is vulnerable to a buffer overflow when processing fragmented EAP-TLS messages. As a result, an internal overflow checking routine terminates the...

Microsoft IE cloneNode释放后重用远程代码执行漏洞(MS12-063)

BUGTRAQ ID: 55647 CVE ID: CVE-2012-2557 Microsoft Internet Explorer是微软公司推出的一款网页浏览器，使用相当广泛。 Microsoft Internet Explorer 6-8存在远程代码执行漏洞，通过引诱用户查看特制网页，攻击者可利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Internet Explorer 8.x Microsoft Internet Explorer 7.x Microsoft Internet Explorer 6.x 厂商补丁： Microsoft ---------...

CVE-2012-2557

Summary of CVE-2012-2557 (CVE-2012-2557): A use-after-free vulnerability in Microsoft Internet Explorer 6–8 can permit remote code execution when a crafted page triggers access to a freed object, commonly associated with cloneNode handling (outerText/ CMarkup context). The issue is described as a...

Microsoft Internet Explorer Remote Code Execution Vulnerability (2757760)

This host is missing a critical security update according to Microsoft Bulletin MS12-063. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for systemd FEDORA-2012-2557

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-2557

CVE-2010-2557 is an Internet Explorer 6 memory-corruption vulnerability (Uninitialized Memory Corruption) where an object that is not properly initialized or is deleted can be exploited by a crafted web page to execute arbitrary code remotely. The issue is part of a family of IE flaws disclosed i...

VUPEN Security Research - Microsoft Internet Explorer "boundElements" Property Use-after-free Vulnerability (CVE-2010-2557)

VUPEN Security Research - Microsoft Internet Explorer "boundElements" Property Use-after-free Vulnerability CVE-2010-2557 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Internet Explorer is a web browser developed by Microsoft and included as part of the...

CVE-2009-2557

Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitrary files via a .. dot dot in the fichier parameter...

CVE-2009-2557

The vulnerability CVE-2009-2557 affects Admin News Tools 2.5, with a directory traversal flaw in system/download.php that permits reading arbitrary files via a .. sequence in the fichier parameter. This is described across multiple sources (NVD entry for CVE-2009-2557 and OpenVAS detail for Admin...

CVE-2009-2557

creationtimestamp| type| source ---|---|--- 2009-07-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9153...

Gentoo Security Advisory GLSA 200509-16 (Mantis)

The remote host is missing updates announced in advisory GLSA 200509-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200509-16 (Mantis)

The remote host is missing updates announced in advisory GLSA 200509-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-2557

Cross-site scripting XSS vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 Links and 2 Links Submit pages...

CVE-2008-2557

The CVE-2008-2557 entry affects CRE Loaded versions 6.2.13.1 and earlier, with a Cross-Site Scripting (XSS) vulnerability exploitable via the Links and Links Submit pages. The underlying issue is an injected web script or HTML due to improper input handling on these pages, enabling arbitrary scri...

Debian: Security Advisory (DSA-778-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 778-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 778-1. Two security related problems have been discovered in Mantis, a web-based bug tracking system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-2556 A remote attacker could...

CVE-2007-2557

MOStlyDB Admin in Mambo 4.6.1 does not properly check privileges, which allows remote authenticated administrators to have an unknown impact via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2557

The CVE-2007-2557 entry concerns MOStlyDB Admin in Mambo 4.6.1, where privileges are not properly checked. The root cause is insufficient privilege validation in the MOStlyDB Admin component, allowing remote authenticated administrators to cause an unknown impact via unspecified vectors. The avai...

CVE-2007-2557

MOStlyDB Admin in Mambo 4.6.1 does not properly check privileges, which allows remote authenticated administrators to have an unknown impact via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-2557

The CVE-2006-2557 entry concerns a PHP remote file inclusion vulnerability in extras/poll/poll.php used by Florian Amrhein NewsPortal prior to 0.37 and the TR Newsportal (TRanx rebuilded). The underlying issue is a remote attacker providing a URL in the file_newsportal parameter, enabling arbitra...