96 matches found
Debian: Security Advisory (DSA-2576-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-2576
creationtimestamp| type| source ---|---|--- 2012-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18818...
Oracle WebLogic ForeignJMS Component Unspecified Information Disclosure (CVE-2008-2576)
According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified local information disclosure vulnerability in its ForeignJMS component, which requires authentication to exploit. %NASLMINLEVEL 70300 C Tenable Network Security,...
openSUSE Security Update : opera (openSUSE-SU-2010:0540-1)
This update of opera fixes the following vulnerabilities : - CVE-2010-2576: CVSS v2 Base Score: 6.8 CWE-94: unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven Krewitt of Secunia - CVE-2010-3019: CVSS v2 Base Score: 9.3 CWE-119: hea...
openSUSE Security Update : opera (openSUSE-SU-2010:0540-1)
This update of opera fixes the following vulnerabilities : - CVE-2010-2576: CVSS v2 Base Score: 6.8 CWE-94: unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven Krewitt of Secunia - CVE-2010-3019: CVSS v2 Base Score: 9.3 CWE-119: hea...
CVE-2010-2576
CVE-2010-2576 (Opera) affects Opera pre-10.61. The issue arises because download dialogs that become visible after a tab change are not properly suppressed, enabling a clickjacking vector. A remote attacker could exploit this to trigger arbitrary code execution via vectors involving (1) closing a...
Secunia Research: Opera "Download" Dialog File Execution Security Issue
====================================================================== Secunia Research 12/08/2010 - Opera "Download" Dialog File Execution Security Issue - ====================================================================== Table of Contents Affected...
CVE-2009-2576
CVE-2009-2576 refers to a Denial of Service in Microsoft Internet Explorer (IE) where a long Unicode string passed to the write method can consume CPU/memory. The OpenVAS entry OpenVAS:900400 explicitly links CVE-2009-2576 to IE Unicode String DoS and lists a base CVSS v2 score of 5.0 (AV:N/AC:L/...
CVE-2008-2576
CVE-2008-2576 affects Oracle WebLogic Server (BEA Product Suite) 8.1 SP6 and 9.x line (9.0–9.2). The connected data describe a local vulnerability in WebLogic Server with unspecified impact; one Nessus entry characterizes a ForeignJMS-related information disclosure that requires authentication. T...
CVE-2007-2576
CVE-2007-2576 refers to a buffer overflow in the East Wind Software advdaudio.ocx 1.5.1.1 ActiveX control. The vulnerability allows remote attackers (user-assisted as stated) to trigger arbitrary code execution by supplying a long OpenDVD property value. Multiple connected records corroborate the...
CVE-2006-2576
CVE-2006-2576 corresponds to Docebo PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier when register_globals is enabled. The issue allows remote code execution by supplying a URL via GLOBALS[where_framework] (files: lib.simplesel.php, lib.filelist.php, tree.documents.php, lib.r...
CVE-2004-2576
CVE-2004-2576 affects phpGroupWare 0.9.16.000; the component class.vfs_dav.inc.php fails to create .htaccess files to enable authorization checks for access to users’ home-directory files. This leads to potential disclosure of sensitive information by remote attackers. The NVD entry lists CVSS v2...
CVE-2005-2576
CaLogic 1.22 (and possibly earlier) is affected by CVE-2005-2576. A remote attacker can cause an information disclosure by requesting any of the following endpoints: doclsqlres.php, clmcpreload.php, viewhistlog.php, mcconfig.php, doclsqlbak.php, defcalsel.php, or cl_minical.php. The vulnerability...
CVE-2004-2576
class.vfsdav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable authorization checks for access to users' home-directory files, which allows remote attackers to obtain sensitive information from these files...
Debian DSA-049-1 : cfingerd
Megyer Laszlo report on Bugtraq that the cfingerd daemon as distributed with Debian GNU/Linux 2.2 was not careful in its logging code. By combining this with an off-by-one error in the code that copied the username from an ident response cfingerd could be exploited by a remote user. Since cfinger...
