77 matches found
Debian DSA-3097-1 : unbound - security update
Florian Maury from ANSSI discovered that unbound, a validating, recursive, and caching DNS resolver, was prone to a denial of service vulnerability. An attacker crafting a malicious zone and able to emit or make emit queries to the server can trick the resolver into following an endless series of...
Google Chrome Multiple Vulnerabilities (May 2012) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Chrome Multiple Vulnerabilities - May 12 (Mac OS X)
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnmay12macosx.nasl 5963 2017-04-18 09:02:14Z teissa $ Google Chrome Multiple Vulnerabilities - May 12 Mac OS X Authors: Madhuri D Copyright: Copyright c 2012...
CVE-2011-3097
The CVE-2011-3097 issue affects Google Chrome’s PDF functionality prior to version 19.0.1084.46. It is due to an out-of-bounds write in the implementation of sampled functions, enabling remote attackers to cause a denial of service and potentially other impacts. Public documents in the connected ...
CVE-2010-3097
Directory traversal vulnerability in WinFrigate Frigate 3 FTP client 3.36 and earlier allows remote FTP servers to overwrite arbitrary files via a ".." dot dot backslash in a filename...
CVE-2010-3097
WinFrigate Frigate 3 FTP client , version 3.36 and earlier, is affected by a directory traversal vulnerability that allows a remote FTP server to overwrite arbitrary files using a filename containing "..\". The root cause is insufficient sanitization of downloaded filenames. Exploitation requires...
CVE-2009-3097
Technical details about CVE-2009-3097 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories before drawing conclusions on impact, affected products, or remediations.
CVE-2008-3097
CVE-2008-3097 affects the Drupal Tinytax module (Tinytax taxonomy block) versions 5.x prior to 5.x-1.10-1. The vulnerability is an XSS flaw where remote authenticated users can inject arbitrary web script or HTML by crafting a taxonomy term. The impact is cross-site scripting with no listed explo...
CVE-2008-3097
Cross-site scripting XSS vulnerability in the Tinytax module aka Tinytax taxonomy block 5.x before 5.x-1.10-1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML, probably by creating a crafted taxonomy term...
CVE-2007-3097
my.activation.php3 in F5 FirePass 4100 SSL VPN allows remote attackers to execute arbitrary shell commands via shell metacharacters in the username parameter...
CVE-2007-3097
my.activation.php3 in F5 FirePass 4100 SSL VPN allows remote attackers to execute arbitrary shell commands via shell metacharacters in the username parameter...
CVE-2007-3097
FirePass (4100 SSL VPN) my.activation.php3 login page suffers a cross-site scripting (XSS) vulnerability due to insufficient sanitization of URL arguments, enabling attacker-controlled HTML/JavaScript when a user follows a crafted link. F5 advisory SOL6919 states this was fixed in maintenance ver...
SOL6919 - Cross-site scripting vulnerability in my.activation.php3 CVE-2007-3097
A cross-site scripting XSS vulnerability exists in the FirePass my.activation.php3 logon page.The affected FirePass logon URL fails to fully sanitize certain URL arguments before the requested web page content is returned to the browser. It is possible for an attacker to create web pages, emails ...
CVE-2006-3097
CVE-2006-3097 affects HP-UX running Support Tools Manager (xstm, cstm, stm) on HP-UX B.11.11 and B.11.23. The issue is a local denial-of-service by an unspecified vulnerability in the Tools Manager, with the impact of Denial of Service. Connected documents identify affected components and version...
CVE-2005-3097
Directory traversal vulnerability in Avi Alkalay contribute.cgi aka contribute.pl, dated 16 Jun 2002, allows remote attackers to overwrite arbitrary files via ".." sequences in the contribdir variable...