360 matches found
CVE-2014-3156
Removed by vendor...
KLA10006 Multiple vulnerabilities in Google Chrome
Multiple serious vulnerabilities have been found in Google Chrome 35.0.1916.114 and earlier. Malicious users can exploit these vulnerabilities to cause denial of service or other possible issues. Below is a complete list of vulnerabilities 1. heap-based buffer overflow in...
CVE-2013-3156
The CVE-2013-3156 issue is a memory-corruption vulnerability in Microsoft Access when parsing ACCDB files, affecting Access 2007 SP3, 2010 SP1/SP2, and 2013. A remote attacker could trigger arbitrary code execution or memory corruption by enticing a user to open a crafted ACCDB file. Evidence fro...
Microsoft Office Access Database Remote Code Execution Vulnerabilities (2848637)
This host is missing an important security update according to Microsoft Bulletin MS13-074. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2012-3156
CVE-2012-3156 affects the Oracle MySQL Server component, with vulnerable versions up to MySQL 5.5.25 (and earlier). The issue allows remote authenticated users to affect availability via unknown vectors related to the Server, with a CVSS base score of 3.5 (LOW) and partial availability impact. Pu...
CVE-2011-3156
HP Data Protector Notebook Extension (and Data Protector for Personal Computers) module exposes a DPNECentral web service (dpnepolicyservice) with a LogClientInstallation method vulnerable to input validation flaws. The ZDI advisory describes remote arbitrary-code execution via the userid field i...
CVE-2010-3156
Untrusted search path vulnerability in K2 K2Editor before 1.5.9 allows local users to gain privileges via a Trojan horse executable file in the current working directory...
CVE-2010-3156
CVE-2010-3156 affects the K2Editor text editor. Multiple sources describe an untrusted search path vulnerability that lets local users gain privileges by placing a Trojan horse executable in the current working directory. Affected versions include K2Editor ≤ 1.5.8 (and before 1.5.9 as the fixed v...
CVE-2009-3156
CVE-2009-3156 : XSS in the Drupal Date module Date Tools sub-module (Drupal 6.x before 6.x-2.3). The vulnerability allows remote authenticated users with either the use date tools or administer content types privileges to inject arbitrary script/HTML via the Content type label field. The issue is...
CVE-2009-3156
Cross-site scripting XSS vulnerability in the Date Tools sub-module in the Date module 6.x before 6.x-2.3 for Drupal allows remote authenticated users, with "use date tools" or "administer content types" privileges, to inject arbitrary web script or HTML via a "Content type label" field...
Gentoo Security Advisory GLSA 200707-05 (webmin/usermin)
The remote host is missing updates announced in advisory GLSA 200707-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200707-05 (webmin/usermin)
The remote host is missing updates announced in advisory GLSA 200707-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-3156
The CVE-2008-3156 entry affects the Panda ActiveScan product, specifically the ActiveX Control as2guiie.dll, before version 1.02.00. The vulnerability allows remote attackers to download and execute arbitrary CAB files by passing URLs to the Update method, enabling arbitrary code execution on the...
Webmin pam_login.cgis远程跨站脚本执行漏洞
BUGTRAQ ID: 24381 CVECAN ID: CVE-2007-3156 Webmin是一款基于WEB的Unix和Linux操作系统管理界面。 Webmin的pamlogin.cgi文件中存在多个跨站脚本漏洞，如果用户受骗访问了恶意网页的话，远程攻击者就可以通过cid、message或question参数向用户浏览器会话注入并执行任意脚本。 Webmin Webmin 1.340 Webmin Usermin 1.270 Webmin ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
[ MDKSA-2007:135 ] - Updated webmin packages fix XSS vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:135 http://www.mandriva.com/security/ Package : webmin Date : June 23, 2007 Affected: 2007.0, 2007.1, Corporate 4.0 Problem Description: Multiple cross-site scripting XSS vulnerabilities were discovered in...
FreeBSD : webmin -- XSS vulnerability (12b7286f-16a2-11dc-b803-0016179b2dd5)
Secunia reports : Input passed to unspecified parameters in pamlogin.cgi is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2007-3156
Webmin pam_login.cgi contains multiple XSS vulnerabilities (CVE-2007-3156) that allow remote attackers to inject arbitrary scripts if a user visits a crafted page. Affected are Webmin prior to 1.350 and Usermin prior to 1.280, where inputs in cid, message, or question are not properly sanitized. ...
CVE-2006-3156
CVE-2006-3156 describes a cross-site scripting (XSS) vulnerability in the web application, specifically in the file index.cgi of Ultimate eShop 1.0 and earlier. The issue is exploitable via the subid parameter and allows remote attackers to inject arbitrary web script or HTML. The available metad...
CVE-2005-3156
GuppY / EasyGuppY (Windows) versions 4.5.4 and 4.5.5 are vulnerable to a directory traversal in printfaq.php via the pg parameter. The input is cleansed for XSS but not for traversal, allowing reading of arbitrary files. Multiple references (NVD CVE-2005-3156, OpenVAS/Nessus plugin) confirm the i...