225 matches found
Microsoft Internet Explorer CVE-2013-3153 Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Microsoft Internet Explorer 6, 7, 8, 9, and 10...
Microsoft Internet Explorer Event Handler Memory Corruption (MS13-055; CVE-2013-3153)
A remote code execution vulnerability has been reported in Internet Explorer...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Report Server Component. NOTE: the previous information is from the Octob...
CVE-2012-3153
CVE-2012-3153 affects Oracle Fusion Middleware’s Oracle Reports Developer (11.1.1.4/11.1.1.6/11.1.2.0). It involves an unspecified vulnerability in the Reports Servlet that can compromise confidentiality and integrity via unknown vectors related to the Report Server component; the vulnerability m...
CVE-2012-3152
CVE-2012-3152/3153 affect Oracle Fusion Middleware’s Oracle Reports Developer component (11.1.1.4, 11.1.1.6, 11.1.2.0). An unspecified vulnerability in the Report Server/Servlet can allow remote attackers to affect confidentiality and integrity; one note indicates possible file read/upload of a ....
Ubuntu Update for lightdm USN-1262-1
Ubuntu Update for Linux kernel vulnerabilities USN-1262-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12621.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for lightdm USN-1262-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...
Ubuntu: Security Advisory (USN-1262-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 11.10 : lightdm vulnerabilities (USN-1262-1)
It was discovered that Light Display Manager incorrectly handled privileges when reading .dmrc files. A local attacker could exploit this issue to read arbitrary configuration files, bypassing intended permissions. CVE-2011-3153 It was discovered that Light Display Manager incorrectly handled lin...
USN-1262-1: Light Display Manager vulnerabilities
It was discovered that Light Display Manager incorrectly handled privileges when reading .dmrc files. A local attacker could exploit this issue to read arbitrary configuration files, bypassing intended permissions. CVE-2011-3153 It was discovered that Light Display Manager incorrectly handled lin...
KLA10037 ACE vulnerability in Adobe InDesign
A critical vulnerability was found in Adobe InDesign and InCopy. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally and possibly remotely at a point related to an untrusted path via DLL hijacking. Original advisories Adobe...
CVE-2010-3153
CVE-2010-3153 affects Adobe InDesign CS4 CS5 (Windows) and InDesign Server CS5, and InCopy CS5 up to 7.0.2. The vulnerability arises from DLL hijacking via a Trojan ibfs32.dll placed in the same folder as .indl, .indp, .indt, or .inx files, enabling untrusted search path execution. Impact is arbi...
CVE-2009-3153
CVE-2009-3153 describes multiple cross-site scripting (XSS) vulnerabilities in the x10 MP3 Search engine 1.6.5. The issues allow remote attackers to inject arbitrary scripts/HTML via: 1) pic_id (includes/video_ad.php), 2) category (linkvideos_listing.php), 3) id (templates/header1.php), 4) id (mp...
CVE-2009-3153
creationtimestamp| type| source ---|---|--- 2009-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34659 2009-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34663 2009-08-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34661 2009-08-29...
CVE-2008-3153
CVE-2008-3153 affects Triton CMS Pro, with a SQL injection vulnerability exploitable via the X-Forwarded-For HTTP header. The available documents identify the vulnerability class and entry but do not specify affected versions, root cause details beyond “SQL injection,” or concrete remediation ste...
CVE-2008-3153
creationtimestamp| type| source ---|---|--- 2008-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6017...
FreeBSD : c-ares -- DNS Cache Poisoning Vulnerability (70ae62b0-16b0-11dc-b803-0016179b2dd5)
Secunia reports : The vulnerability is caused due to predictable DNS 'Transaction ID' field in DNS queries and can be exploited to poison the DNS cache of an application using the library if a valid ID is guessed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...
CVE-2007-3153
The CVE-2007-3153 entry describes a vulnerability in the c-ares library: on non-Windows platforms, ares_init:randomize_key uses a weak random-number source (Unix rand), enabling attackers to spoof DNS responses by guessing values. The issue is linked to multiple advisories and updates (e.g., Fedo...
CVE-2007-3153
The aresinit:randomizekey function in c-ares, on platforms other than Windows, uses a weak facility for producing a random number sequence Unix rand, which makes it easier for remote attackers to spoof DNS responses by guessing certain values...
CVE-2006-3153
The CVE-2006-3153 issue is a cross-site scripting (XSS) vulnerability in index.pl of Ultimate Estate 1.0 and earlier. The vulnerability arises from the cat parameter, enabling remote attackers to inject arbitrary web script or HTML. Affected product: Ultimate Estate (version 1.0 and earlier). Roo...