62 matches found
Debian DSA-3130-1 : lsyncd - security update
It was discovered that lsyncd, a daemon to synchronize local directories using rsync, performed insufficient sanitising of filenames which might result in the execution of arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...
Oracle Solaris Critical Patch Update : jul2012_SRU7_5
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: mailx1. Supported versions that are affected are 8, 9, 10 and 11. Difficult to exploit vulnerability requiring logon to...
CVE-2014-3130
The ABAP Help documentation and translation tools BC-DOC-HLP in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages...
CVE-2014-3130
Technical details (affected product/version, root cause, exploit information) are not provided in the supplied documents for CVE-2014-3130; monitor for updates.
CVE-2013-3130
CVE-2013-3130 is rejected/not used and does not represent an active vulnerability entry.
CVE-2013-3130
creationtimestamp| type| source ---|---|--- 2013-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25611 2013-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25912 2013-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26554...
CVE-2012-3130
Affected product : Oracle Solaris 11. Vulnerable component : pkg.depotd (Solaris depot service). Impact : Integrity impact from a remote unauthenticated attacker, as described in CVE-2012-3130; CVSS suggests network access, with partial integrity impact and no confidentiality or availability impa...
CVE-2011-3130
wp-includes/taxonomy.php in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Taxonomy query hardening," possibly involving SQL injection...
CVE-2011-3130
wp-includes/taxonomy.php in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Taxonomy query hardening," possibly involving SQL injection...
CVE-2011-3130
CVE-2011-3130 affects WordPress WordPress 3.1.x before 3.1.3 and 3.2 before Beta 2, with concerns around Taxonomy query hardening that could involve SQL injection. The connected Debian/OpenVAS entries corroborate multiple CVEs in this WordPress release line and recommend upgrading to the latest u...
CVE-2010-3130
Snagit DLL preloading vulnerability (CVE-2010-3130) affects TechSmith Snagit 10.x and 11.x. A malicious dwmapi.dll located in the same folder as a snag, snagcc, or snagprof file can be loaded, enabling arbitrary code execution via DLL hijacking when a user opens a crafted Snagit file from an atta...
CVE-2010-3130
creationtimestamp| type| source ---|---|--- 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14764...
CVE-2009-3130
CVE-2009-3130 corresponds to the Excel Document Parsing Heap Overflow vulnerability. Affected software includes Microsoft Office Excel 2002 SP3, Excel 2003 and newer on Windows via BIFF parsing, and Office for Mac variants plus the Open XML File Format Converter for Mac. The root cause is imprope...
Microsoft Excel畸形BIFF记录远程代码执行漏洞(MS09-067)
Bugraq ID: 36946 CVE ID：CVE-2009-3130 Microsoft Excel是一款微软开发的电子表格处理程序。 Microsoft Office Excel存在一个远程代码执行漏洞，如果用户打开一个特殊构建的包含畸形的BIFF记录的Excel文件可允许远程代码执行。 成功利用此漏洞允许完全控制受影响系统，攻击者成功利用此漏洞可以以内核权限安装程序；查看，更改或删除数据等。 Microsoft Open XML File Format Converter for Mac Microsoft Office 2008 for Mac Microsoft Offic...
CVE-2008-3130
CVE-2008-3130 involves multiple cross-site scripting (XSS) vulnerabilities in OpenCart 0.7.7. The issue resides in index.php where the (1) firstname and (2) search parameters can be crafted to inject arbitrary web script or HTML. This describes a client-side injection vulnerability that could aff...
CVE-2007-3130
Multiple PHP remote file inclusion vulnerabilities in the OpenWiki formerly JD-Wiki component comjd-wiki 1.0.2, and possibly earlier, for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 dwpage.php or 2 wantedpages.php, different...
CVE-2007-3130
Multiple PHP remote file inclusion vulnerabilities in the OpenWiki formerly JD-Wiki component comjd-wiki 1.0.2, and possibly earlier, for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 dwpage.php or 2 wantedpages.php, different...
CVE-2007-3130
CVE-2007-3130 concerns multiple PHP remote file inclusion vulnerabilities in the OpenWiki (com_jd-wiki) Joomla! component (JD-Wiki) 1.0.2 and earlier. The root cause is improper use of the mosConfig_absolute_path parameter, allowing an attacker to supply a URL to include arbitrary PHP code via dw...