273 matches found
Vulnerability Spotlight: Multiple Vulnerabilities in InsideSecure MatrixSSL
These vulnerabilities were discovered by Aleksandar Nikolic of Cisco TalosOverviewMatrixSSL is a TLS/SSL stack offered in the form of a Software Development Kit SDK that is geared towards application in Internet of Things IOT devices and other embedded systems. It features low resource overhead a...
CVE-2016-2781
chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer...
AZL-6355 CVE-2016-2781 affecting package coreutils for versions less than 8.32-1
chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer...
CVE-2016-2781
chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer...
CVE-2016-2781
CVE-2016-2781: chroot in GNU coreutils, when used with --userspec, is vulnerable to local privilege escalation via a crafted TIOCSTI ioctl that injects characters into the terminal input buffer, enabling a local user to escape to the parent session. Affected component is chroot in coreutils; root...
CVE-2016-2781
chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer...
CVE-2016-2781
chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer...
CVE-2016-2781
chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer...
CVE-2016-2781
chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer...
Ubuntu 14.04 LTS : MySQL vulnerabilities (USN-2781-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2781-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to...
Ubuntu: Security Advisory (USN-2781-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2781
CVE-2015-2781 describes a cross-site scripting (XSS) vulnerability in Hotspot Express hotEx Billing Manager 73, via the hotspotlogin.cgi parameter reply. A malicious user can inject script into pages viewed by other users; PoC shows script execution (e.g., alert(document.cookie)). The vulnerable ...
CVE-2014-2781
CVE-2014-2781 describes a local privilege-escalation in Windows On-Screen Keyboard (OSK). A low-integrity process could interact with OSK to load a crafted program, bypassing integrity checks and achieving elevation. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Win...
CVE-2009-2781
CVE-2009-2781 describes an SQL injection in Arab Portal 2.x/forum.php where remote authenticated users can inject via the qc parameter in an addcomment action (when magic_quotes_gpc is disabled). This is a distinct vector from CVE-2006-1666. Affected: Arab Portal 2.x/2.0.1 stable forum.php compon...
CVE-2009-2781
creationtimestamp| type| source ---|---|--- 2009-08-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9320...
HP-UX Update for Mozilla remote HPSBUX01133
Check for the Version of Mozilla remote OpenVAS Vulnerability Test HP-UX Update for Mozilla remote HPSBUX01133 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Gentoo Security Advisory GLSA 200606-21 (mozilla-thunderbird)
The remote host is missing updates announced in advisory GLSA 200606-21. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-2781
SQL injection vulnerability in index.php in DZOIC Handshakes 3.5 allows remote attackers to execute arbitrary SQL commands via the fname parameter in a members search action...
CVE-2008-2781
The CVE-2008-2781 issue affects DZOIC Handshakes 3.5 (index.php) where the fname parameter in a members search action is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. Root cause: improper input handling in the search logic leads to unescaped user input ...