CVE-2011-3060

CVE-2011-3060 affects Google Chrome (pre-18.0.1025.142). The issue is a vulnerability in how text fragments are handled, leading to an out-of-bounds read and potential denial of service. The description specifies the vector as unspecified and does not provide exploitation details. The available i...

Google Chrome 18.0.1025.142之前版本多个内存破坏漏洞

BUGTRAQ ID: 52762 CVE ID: CVE-2011-3058,CVE-2011-3059,CVE-2011-3060,CVE-2011-3061,CVE-2011-3062,CVE-2011-3063,CVE-2011-3064,CVE-2011-3065 Google Chrome是由Google开发的一款设计简单、高效的Web浏览工具。 Google Chrome 18.0.1025.142之前版本在实现上存在多个安全漏洞，攻击者可利用这些漏洞执行任意代码、绕过安全限制、执行跨站脚本执行攻击。 0 Google Chrome 18.0.1025.142 厂商补丁：...

Design/Logic Flaw

The CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate an unspecified length value, which allows remote attackers to cause a denial of service daemon crash b...

Null pointer dereference

The DASReadBlockReply function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via data in a TCP packet. NOTE: this mig...

CVE-2010-3060

CVE-2010-3060 targets IBM Tivoli Storage Manager (TSM) FastBack Server. The vulnerability resides in the server’s message-protocol handling for FastBack 5.x (pre-5.5.7) and 6.1.0.0, enabling remote DoS (daemon outage) via unknown vectors. Related entries (e.g., CVE-2010-3756, CVE-2010-3755) descr...

CVE-2009-3060

Multiple cross-site scripting XSS vulnerabilities in Joker Board aka JBoard 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the notice parameter to editform.php, 2 the editusermessage parameter to core/editusermessage.php, or 3 the usertitle parameter to...

CVE-2009-3060

CVE-2009-3060 affects Joker Board (aka JBoard) 2.0 and earlier. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML through specific user input vectors: the notice parameter in editform.php, edit_user_messa...

Fedora Update for rsync FEDORA-2008-3060

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-3060

V-webmail version 1.5.0 is affected by CVE-2008-3060. The vulnerability arises from (1) malformed input on the login page (includes/local.hooks.php) and (2) an invalid session ID, both of which can cause error messages that reveal the installation path. This indicates a potential information disc...

CVE-2007-3060

PHP Live! 3.2.2 (and earlier) is affected by multiple cross-site scripting (XSS) vulnerabilities. The CVE-2007-3060 entry and related records describe XSS vectors that allow an attacker to inject arbitrary script or HTML via parameters such as sid in chat.php, LANG[DEFAULT_BRANDING], PHPLIVE_VERS...

CVE-2006-3060

P.A.I.D 2.2 contains a Cross-site scripting (XSS) vulnerability exploitable via (1) read parameter in index.php, (2) farea parameter in faq.php, and (3) unspecified inputs on the My Account login page. The CVSS v2 base score is 4.3 (Medium) with potential to inject arbitrary web script/HTML. No r...

CVE-2005-3060

CVE-2005-3060 affects IBM AIX getconf in AIX 5.2–5.3, due to a buffer overflow in the getconf utility. Exploitation would be local (authenticated) and may allow arbitrary code execution on the affected host. The CERT/IBM documentation identifies IBM as vendor and points to updates (IY73814, IY738...