56 matches found
[SECURITY] [DLA 265-2] pykerberos regression update
Package : pykerberos Version : 1.1+svn4895-1+deb6u2 CVE ID : CVE-2015-3206 It was discovered that the original fix did not disable KDC verification support by default and changed checkPassowrds signature. This update corrects this. This was the text of the original advisiory: Martin Prpic has...
[SECURITY] [DLA 265-1] pykerberos security update
Package : pykerberos Version : 1.1+svn4895-1+deb6u1 CVE ID : CVE-2015-3206 Martin Prpic has reported the possibility of a man-in-the-middle attack in the pykerberos code to the Red Hat Bugzilla Fedora bug tracker. The original issue has earlier been reported upstream 1. We are quoting the upstrea...
Debian DSA-3206-1 : dulwich - security update
Multiple vulnerabilities have been discovered in Dulwich, a Python implementation of the file formats and protocols used by the Git version control system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2014-9706 It was discovered that Dulwich allows...
Memory corruption
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3203, CVE-2013-3206, CVE-2013-3207, and...
CVE-2013-3206
Microsoft Internet Explorer 9–10 memory corruption vulnerability (CVE-2013-3206) can allow remote code execution or memory corruption via a crafted web site. Affected product is IE9/IE10; root cause is memory handling errors in IE when processing web content. Remediation is provided by Microsoft ...
Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities (2870699)
This host is missing a critical security update according to Microsoft Bulletin MS13-069. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft Internet Explorer Memory Corruption (MS13-069: CVE-2013-3206)
A remote code execution vulnerability exists in Internet Explorer...
CVE-2012-3206
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2011-3206
Multiple cross-site scripting XSS vulnerabilities in the administration interface in RHQ 4.2.0, as used in JBoss Operations Network aka JON or JBoss ON before 3.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-3206
The CVE-2011-3206 entry describes multiple XSS vulnerabilities in the RHQ/JBoss ON administration interface (RHQ 4.2.0, used in JBoss Operations Network before 3.0). The root cause is lack of input validation in the administration UI, allowing remote attackers to inject arbitrary script/HTML via ...
CVE-2009-3206
CVE-2009-3206 describes multiple cross-site scripting (XSS) vulnerabilities in the Drupal ImageCache module, affecting 5.x versions prior to 5.x-2.5 and 6.x prior to 6.x-2.0-beta10. The flaws allow remote authenticated users with the "administer imagecache" permission to inject arbitrary web scri...
CVE-2008-3206
CVE-2008-3206 describes an SQL injection in the web application component browse.groups.php of Yuhhu Pubs Black Cat, exploitable via the category parameter. The vulnerability allows remote attackers to potentially retrieve or modify data (risk to confidentiality, integrity, and availability as in...
CVE-2006-3206
The connected sources confirm CVE-2006-3206 affects Ultimate PHP Board (UPB) versions 1.9.6 and earlier, with a vulnerability in register.php. The root cause is that the signature field uses the "[NR]" sequence to separate records, enabling remote attackers to create arbitrary user accounts. The ...
CVE-2005-3206
iSQLPlus isqlplus for Oracle9i Database Server Release 2 9.0.2.4 allows remote attackers to cause a denial of service TNS listener stop via an HTTP request with an sid parameter that contains a STOP command...
CVE-2005-3206
CVE-2005-3206 affects iSQL*Plus (isqlplus) for Oracle9i Database Server Release 2 (9.0.2.4). The issue enables remote attackers to cause a denial of service by sending an HTTP request with an sid parameter containing a STOP command, which can stop the TNS listener. The available connected documen...