Google Chrome < 36.0.1985.125 Multiple Vulnerabilities (Mac OS X)

The version of Google Chrome installed on the remote Mac OS X host is a version prior to 36.0.1985.125. It is, therefore, affected by multiple vulnerabilities allowing an attacker to compromise the integrity of the system via unspecified vectors. C Tenable Network Security, Inc...

Debian: Security Advisory (DSA-2581-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Word XML文件处理信息泄露漏洞(CVE-2013-3160)(MS13-072)

BUGTRAQ ID: 62162 CVECAN ID: CVE-2013-3160 Microsoft Word 属于办公软件是微软公司的一个文字处理器应用程序 Microsoft Word 分析包含外部实体的特制 XML 文件的方式中存在一个信息泄露漏洞。处理XML数据时出错，通过发送包含外部实体引用的特制XML数据，攻击者可获取本地文件内容 0 Microsoft Office 2010 Microsoft Office 2007 Microsoft Office 2003 临时解决方法： 安装和配置 MOICE 以 成为 .doc 文件的注册处理程序 使用 Microsoft...

CVE-2013-3160

CVE-2013-3160 corresponds to an XXE vulnerability in Microsoft Office 2003 SP3/2007 SP3, Word 2003/2007, and Word Viewer. Its root cause is improper handling of XML with an external entity declaration and an entity reference, allowing a remote attacker to read local files. Connected sources enume...

MS13-072: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2845537)

The remote Windows host is running a version of Microsoft Office, Microsoft Word, Office Compatibility Pack, or Microsoft Word Viewer that is affected by the following remote code execution vulnerabilities : - A remote code execution vulnerability exists due to the way the XML parser used by Word...

MariaDB 5.5.0 < 5.5.28 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.28. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.28 advisory. - Unspecified vulnerability in the Server component in Oracle MySQL 5.1.65 and earlier and 5.5.27 and earlier allows remote...

[SECURITY] [DSA 2581-1] mysql-5.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2581-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez December 04, 2012 http://www.debian.org/security/faq -...

Scientific Linux Security Update : mysql on SL6.x i386/x86_64 (20121114)

This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory pages. CVE-2012-1688, CVE-2012-1690, CVE-2012-1703, CVE-2012-2749, CVE-2012-0540, CVE-2012-1689, CVE-2012-1734, CVE-2012-3163,...

CentOS Update for mysql CESA-2012:1462 centos6

Check for the Version of mysql OpenVAS Vulnerability Test CentOS Update for mysql CESA-2012:1462 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

MySQL 5.1 < 5.1.66 Multiple Vulnerabilities

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.66 and is, therefore, affected by vulnerabilities in the following components : - Server Installation - Server - Server Optimizer - GIS Extension C Tenable Network Security, Inc. include"compat.inc"; if description...

MySQL Server 5.5.x <= 5.5.27 / 5.1.x <= 5.1.65 Multiple Unspecified Vulnerabilities

Binary data 801117.prm...

MySQL 5.5 < 5.5.28 Multiple Vulnerabilities

The version of MySQL 5.5 installed on the remote host is earlier than 5.5.28 and is, therefore, affected by vulnerabilities in the following components : - GIS Extension - Server - Server Installation - Server Optimizer - yaSSL C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2012-3160

CVE-2012-3160 is an unspecified vulnerability in the MySQL Server component affecting Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier. It allows local users to affect confidentiality via unknown vectors related to Server Installation. Publicly referenced sources (OpenVAS, Debian DSA-2581-...

VLC (libtaglib_plugin.dll) divide by zero DOS

No description provided by source. import binascii print '\n\n' print '' print ' VLC libtaglibplugin.dll divide by zero DOS ' print ' Tested on : Windows 7 and XP sp3 ' print ' VLC verion : 1.2.0 and 1.1.11 possibly lower ' print ' Author : nomnom ' print ' Date : 1/19/2012 ' print ' - shouts to...

CVE-2011-3160

HP Data Protector Notebook Extension has a remote code execution vulnerability (ZDI-1228) affecting dpnepolicyservice via LogCopyOperation. The flaw exists in the DPNECentral Web Service on TCP port 80; the copyStatus field from a user request is used to construct a query without proper validatio...

CVE-2010-3160

Archive Decoder ≤1.23 is affected by an untrusted search path vulnerability that allows local users to gain privileges by placing a Trojan horse executable in the current working directory. The issue arises from insecure loading of executables during file extraction. Affected product is Archive D...

CVE-2009-3160

CVE-2009-3160 affects IBM WebSphere MQ 6.x up to 6.0.2.7 and 7.0.x (7.0.0.0, 7.0.0.1, 7.0.0.2, 7.0.1.0). The issue is related to a memory overwrite vulnerability when read-ahead or asynchronous message consumption is enabled. The provided documents describe an unspecified impact and unknown vecto...

CVE-2008-3160

IBM Data ONTAP 7.1 before 7.1.3, as used by IBM System Storage N series Filer and N series Gateway, has multiple unspecified vulnerabilities with unknown impact and attack vectors. The CVE entry does not specify affected subcomponents, exact root causes, or concrete exploitation details in the pr...

CVE-2006-3160

Cross-site scripting XSS vulnerability in fm.php in ONEdotOH Simple File Manager SFM 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2006-3160

The CVE-2006-3160 entry describes a Cross-Site Scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) up to version 0.24a, specifically in fm.php where the msg parameter can be leveraged to inject arbitrary script/HTML. The vulnerability affects the fm.php component and arises from i...