96 matches found
CVE-2015-3242
This CVE entry CVE-2015-3242 is rejected/not used per the description.
Debian DSA-3242-1 : chromium-browser - security update
Several vulnerabilities were discovered in the chromium web browser : - CVE-2015-1243 Saif El-Sherei discovered a use-after-free issue. - CVE-2015-1250 The chrome 42 team found and fixed multiple issues during internal auditing. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
Debian Security Advisory DSA 3242-1 (chromium-browser - security update)
Several vulnerabilities were discovered in the chromium web browser: CVE-2015-1243 Saif El-Sherei discovered a use-after-free issue. CVE-2015-1250 The chrome 42 team found and fixed multiple issues during internal auditing. OpenVAS Vulnerability Test $Id: deb3242.nasl 6609 2017-07-07 12:05:59Z...
Joomla! <= 3.0.3 (remember.php) - PHP Object Injection Vulnerability
No description provided by source. ------------------------------------------------------------------ Joomla! = 3.0.3 remember.php PHP Object Injection Vulnerability ------------------------------------------------------------------ - Software Link: http://www.joomla.org/ - Affected Versions:...
UBUNTU-CVE-2014-3242
SOAPpy 0.12.5 allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
CVE-2014-3242
CVE-2014-3242 affects SOAPpy 0.12.5, where processing XML External Entities (XXE) allows remote attackers to read arbitrary files via a SOAP request containing an external entity declaration and an entity reference. The connected sources consistently describe the issue as an XXE flaw in SOAPpy 0....
PT-2014-3236 · Synology · Synology Diskstation Manager
Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions 4.0 through 4.0-2258 Synology DiskStation Manager DSM versions 4.2 through 4.2-3242 Synology DiskStation Manager DSM versions 4.3 through 4.3-3809 Description: The issue allows remote attackers to...
[KIS-2013-04] Joomla! <= 3.0.3 (remember.php) PHP Object Injection Vulnerability
------------------------------------------------------------------ Joomla! = 3.0.3 remember.php PHP Object Injection Vulnerability ------------------------------------------------------------------ - Software Link: http://www.joomla.org/ - Affected Versions: Version 3.0.3 and earlier 3.0.x...
CVE-2013-3242
plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an object obtained by unserializing a cookie, which allows remote authenticated users to conduct PHP object injection attacks and cause a denial of service via unspecified vectors...
CVE-2013-3242
Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 are affected by CVE-2013-3242 due to improper handling of an object obtained from unserializing a cookie in plugins/system/remember/remember.php. An authenticated remote attacker can trigger PHP object injection and cause a denial of service via ...
Joomla! 3.0.3 PHP Object Injection Vulnerability
Joomla! versions 3.0.3 and below suffer from a PHP object injection vulnerability in remember.php. ------------------------------------------------------------------ Joomla! decrypt$str; 45. $cookieData = @unserialize$str; User input passed through cookies is not properly sanitized before being...
Joomla! 3.0.3 PHP Object Injection
------------------------------------------------------------------ Joomla! decrypt$str; 45. $cookieData = @unserialize$str; User input passed through cookies is not properly sanitized before being used in an unserialize call at line 45. This could be exploited to inject arbitrary PHP objects into...
Joomla! 3.0.3 - 'remember.php' PHP Object Injection
------------------------------------------------------------------ Joomla! decrypt$str; 45. $cookieData = @unserialize$str; User input passed through cookies is not properly sanitized before being used in an unserialize call at line 45. This could be exploited to inject arbitrary PHP objects into...
CVE-2013-3242
creationtimestamp| type| source ---|---|--- 2013-04-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25087...
Joomla! 3.0.3 - remember.php PHP Object Injection
Joomla! 3.0.3 - remember.php PHP Object Injection ------------------------------------------------------------------ Joomla! decrypt$str; 45. $cookieData = @unserialize$str; User input passed through cookies is not properly sanitized before being used in an unserialize call at line 45. This could...
Slackware Advisory SSA:2006-207-01 mutt
The remote host is missing an update as announced via advisory SSA:2006-207-01. OpenVAS Vulnerability Test $Id: esoftslkssa200620701.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
Slackware: Security Advisory (SSA:2006-207-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple Safari WebKit Private Browsing模式Cookie限制绕过漏洞
CVE ID: CVE-2011-3242 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Safari在Private Browsing模式中处理cookie时存在逻辑错误，即使"Block cookies"设置为“Always”也会设置cookie。 Apple Mac OS X 10.6.8 Apple Mac OS X Server v10.6.8 Apple OS X Lion 10.7.2 Apple OS X Lion Server 10.7.2 厂商补丁： Apple -----...