Siemens Simatic SCADA WINCC SQL Insecure Default Credentials Security Bypass (CVE-2010-2772)

A security bypass vulnerability has been reported in Siemens SIMATIC WinCC server. A remote attacker can exploit this issue by using the default hard-coded password to bypass certain security restrictions and gain access to the application's database...

Debian DSA-2772-1 : typo3-src - XSS

Markus Pieton and Vytautas Paulikas discovered that the embedded video and audio player in the TYPO3 web content management system is suspectible to cross-site-scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...

Debian: Security Advisory (DSA-2772-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2012-2772

Unspecified vulnerability in the ffrv34decodeframe function in libavcodec/rv34.c in FFmpeg before 0.11, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.4, has unknown impact and attack vectors, related to "width/height changing with frame threading."...

CVE-2012-2772

The CVE-2012-2772 entry affects FFmpeg (before 0.11) and Libav (0.7.x before 0.7.7 and 0.8.x before 0.8.4) due to a bug in ff_rv34_decode_frame in libavcodec/rv34.c. The issue is described as width/height changes when frame threading are involved, with the specific advisory note that rv34 can err...

CVE-2011-2772

The getdatarootimagepath function in lib/file.php in Mahara before 1.4.1 does not properly validate uploaded image files, which allows remote attackers to cause a denial of service memory consumption via a 1 large or 2 invalid image...

CVE-2011-2772

The CVE-2011-2772 issue affects Mahara up to version 1.4.1, where get_dataroot_image_path in lib/file.php fails to properly validate uploaded images, allowing remote attackers to trigger a denial of service through large or invalid images. Public sources (NVD, Red Hat, Debian) confirm the vulnera...

CVE-2010-2772

CVE-2010-2772 affects Siemens SIMATIC WinCC and SIMATIC PCS 7: a security bypass via default hard-coded SQL credentials allows remote attackers to access the backend database with administrative-like access. The vulnerability is tied to use of default credentials in the WinCC SQL server, permitti...

CVE-2010-2568

Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted 1 .LNK or 2 .PIF shortcut file, which is not properly handled during icon display in Windows Explorer...

Code injection

Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted 1 .LNK or 2 .PIF shortcut file, which is not properly handled during icon display in Windows Explorer...

CVE-2010-2772

Siemens Simatic WinCC and PCS 7 SCADA system uses a hard-coded password, which allows local users to access a back-end database and gain privileges, as demonstrated in the wild in July 2010 by the Stuxnet worm, a different vulnerability than CVE-2010-2568. Recent assessments: Assessed Attacker...

CA BrightStor ARCserve Backup caloggerd.exe Null Hostname Denial of Service (CVE-2007-2772)

A Null dereference vulnerability exists in the CA BrightStor ARCserve Backup caloggerd process. The vulnerability is due to insufficient data validation when parsing strings in received RPC requests. A remote unauthenticated attacker may leverage this vulnerability by sending a specially crafted...

CVE-2009-2772

The CVE-2009-2772 entry describes multiple cross-site scripting (XSS) vulnerabilities in the PG Roommate Finder Solution. The flaw allows remote attackers to inject arbitrary web script or HTML through the part parameter to two PHP scripts: quick_search.php and viewprofile.php. The NVD metrics sh...

CVE-2009-2772

creationtimestamp| type| source ---|---|--- 2009-06-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33113 2009-06-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33112...

CVE-2008-2772

The Magic Tabs module 5.x before 5.x-1.1 for Drupal allows remote attackers to execute arbitrary PHP code via unspecified URL arguments, possibly related to a missing "whitelist of callbacks."...

CVE-2008-2772

CVE-2008-2772 describes a vulnerability in the Magic Tabs module for Drupal, where versions 5.x prior to 5.x-1.1 allow remote attackers to execute arbitrary PHP code via unspecified URL arguments, possibly due to a missing whitelist of callbacks. The affected software is the Magic Tabs module ver...

CVE-2007-2772

CA BrightStor ARCserve Backup 11.5.2.0 SP2 is affected: caloggerd.exe (camt70.dll) and mediasvr.exe (catirpc.dll, rwxdr.dll) can be remotely triggered to crash via crafted RPC packets, due to a NULL dereference stemming from insufficient data validation in RPC request parsing. The CA advisory CPA...

CVE-2006-2772

CVE-2006-2772 describes an XSS vulnerability in the add.asp component of Hogstorps hogstorp guestbook 2.0. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) headline parameters. The NVD entry lists a CVSS v2 base score of 6.8 (Medium) wi...

[SECURITY] [DSA 832-1] New gopher packages fix several buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 832-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 832-1] New gopher packages fix several buffer overflows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 832-1 [email protected] http://www.debian.org/security/ Martin Schulze September 30th, 2005 http://www.debian.org/security/faq -...