CVE-2013-3238

CVE-2013-3238 affects phpMyAdmin: versions 3.5.x before 3.5.8.1 and 4.x before 4.0.0-rc3 allow remote authenticated users to execute arbitrary PHP code via a /e\x00 sequence in the Replace table prefix flow, before a preg_replace call. Impact is arbitrary code execution in the HTTP server context...

phpMyAdmin 3.5.8 / 4.0.0-RC2 Code Execution / LFI / Overwrite

waraxe-2013-SA103 - Multiple Vulnerabilities in phpMyAdmin =============================================================================== Author: Janek Vind "waraxe" Date: 25. April 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-103.html Description of vulnerable software:...

CVE-2013-3238

creationtimestamp| type| source ---|---|--- 2013-04-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25003 2013-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25136 2018-05-29 15:50:33+00:00| seen|...

CVE-2012-3238

CVE-2012-3238 describes a cross-site scripting (XSS) vulnerability in the Backup/Restore component of WebAdmin on Astaro Security Gateway, exploited by injecting arbitrary web-script/HTML via the “Comment (optional)” field. Affected product/version scope: Astaro Security Gateway prior to 8.305 (W...

CVE-2012-3238

Cross-site scripting XSS vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment optional" field...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6641)

This update fixes various bugs and some security issues in the SUSE Linux Enterprise 10 SP 3 kernel. The following security issues were fixed: CVE-2009-3238: The getrandomint function in drivers/char/random.c in the Linux kernel produces insufficiently random numbers, which allows attackers to...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6636)

This update fixes a several security issues and various bugs in the SUSE Linux Enterprise 10 SP 2 kernel. The following security issues were fixed: CVE-2009-3547: A race condition during pipe open could be used by local attackers to elevate privileges. - On x8664 systems a information leak of hig...

APPLE-SA-2011-10-12-4 Safari 5.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-4 Safari 5.1.1 Safari 5.1.1 is now available and addresses the following: Safari Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7.2, OS X Lion Server v10.7.2, Windows 7, Vista, XP SP2 or later Impact:...

CVE-2011-3238

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1...

CVE-2011-3238

CVE-2011-3238 affects WebKit as used in Apple iTunes before version 10.5. The vulnerability allows a man-in-the-middle attacker to cause memory corruption and application crash or to execute arbitrary code via vectors related to iTunes Store browsing. Exploitation details (specific exploit vector...

MS10-079 / MS10-080 : Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2293194 / 2293211) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Office that is affected by multiple remote code execution vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Word, Excel, or Lotus 1-2-3 file, these issues could be leveraged to execute...

VUPEN Security Research - Microsoft Office Excel Negative Future Function Vulnerability (CVE-2010-3238)

VUPEN Security Research - Microsoft Office Excel Negative Future Function Vulnerability CVE-2010-3238 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Excel is a powerful tool you can use to create and format spreadsheets, and analyze and share...

CVE-2010-3238

CVE-2010-3238 is a Remote Code Execution in Microsoft Excel via a crafted Excel file that abuses a memory handling error when parsing binary file-format information (Negative Future Function). Affected products include Microsoft Excel 2002 SP3, Excel 2003 SP3, and Office 2004 for Mac. The vulnera...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6637)

This update fixes various bugs and some security issues in the SUSE Linux Enterprise 10 SP 3 kernel. The following security issues were fixed: CVE-2009-3238: The getrandomint function in drivers/char/random.c in the Linux kernel produces insufficiently random numbers, which allows attackers to...

Debian DSA-1927-1 : linux-2.6 - privilege escalation/denial of service/sensitive memory leak

Notice: Debian 5.0.4, the next point release of Debian 'lenny', will include a new default value for the mmapminaddr tunable. This change will add an additional safeguard against a class of security vulnerabilities known as 'NULL pointer dereference' vulnerabilities, but it will need to be...

Debian DSA-1929-1 : linux-2.6 - privilege escalation/denial of service/sensitive memory leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, sensitive memory leak or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1883 Solar Designer discovered a missing capability...

Debian DSA-1928-1 : linux-2.6.24 - privilege escalation/denial of service/sensitive memory leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, sensitive memory leak or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2846 Michael Buesch noticed a typing issue in the...

Sql injection

Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php, 2 cateid parameter to category.php, 3 id parameter to news.php, and 4 productid parameter to itechd.php. NOTE: the sellersothersitem.php,...

SLES10: Security update for Linux kernel

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kernel-bigsmp kernel-debug kernel-default kernel-kdump kernel-smp kernel-source kernel-syms kernel-vmi kernel-vmipae kernel-xen kernel-xenpae More details ma...

Debian: Security Advisory (DSA-1927-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...