125 matches found
CVE-2015-3253
The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object...
CVE-2015-3253
CVE-2015-3253 affects Apache Groovy 1.7.0–2.4.3. The vulnerability resides in deserialization via crafted serialized objects in the MethodClosure.java runtime, enabling remote code execution or DoS. Exploitation was reported across multiple advisories; F5 and other vendors reference the same issu...
CVE-2015-3253
The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized object...
MGASA-2015-0296 Updated groovy package fixes security vulnerability
When an application has Groovy on the classpath and that it uses standard Java serialization mechanim to communicate between servers, or to store local data, it is possible for an attacker to bake a special serialized object that will execute code directly when deserialized. All applications whic...
Updated groovy package fixes security vulnerability
When an application has Groovy on the classpath and that it uses standard Java serialization mechanim to communicate between servers, or to store local data, it is possible for an attacker to bake a special serialized object that will execute code directly when deserialized. All applications whic...
[SECURITY] [DLA 274-1] groovy security update
Package : groovy Version : 1.7.0-4+deb6u1 CVE ID : CVE-2015-3253 cpnrodzc7, working with HPs Zero Day Initiative, discovered that Java applications using standard Java serialization mechanisms to decode untrusted data, and that have Groovy on their classpath, can be passed a serialized object tha...
Debian: Security Advisory (DSA-3253-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Xhanch - My Twitter插件跨站请求伪造漏洞(CVE-2013-3253)
Bugtraq ID:61629 CVE ID:CVE-2013-3253 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志 WordPress Xhanch - My Twitter插件存在一个跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作 0 WordPress Xhanch - My Twitter Plugin 2.7.5 厂商解决方案 WordPress Xhanch - My Twitter Plugin 2.7.7已经修复此漏洞，建议用户下载更新：...
CVE-2013-3253
Cross-site request forgery CSRF vulnerability in admin/setting.php in the Xhanch - My Twitter plugin before 2.7.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change unspecified settings...
CVE-2013-3253
Cross-site request forgery CSRF vulnerability in admin/setting.php in the Xhanch - My Twitter plugin before 2.7.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change unspecified settings...
CVE-2013-3253
CVE-2013-3253 documents a Cross-Site Request Forgery (CSRF) in the WordPress plugin Xhanch – My Twitter, specifically in admin/setting.php. Affected plugin versions are prior to 2.7.7, enabling remote attackers to hijack the administrator’s authentication to perform actions that change unspecifie...
Fedora Update for crypto-utils FEDORA-2013-3253
Check for the Version of crypto-utils OpenVAS Vulnerability Test Fedora Update for crypto-utils FEDORA-2013-3253 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CVE-2012-3253
Affected product/version: HP Intelligent Management Center (IMC) prior to 5.0 E0101P05. Vulnerability details: remote attackers can execute arbitrary code via crafted input, demonstrated by an integer overflow and a heap-based buffer overflow in img.exe when processing a crafted message packet. R...
CVE-2011-3253
CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, allowing MITM attackers to spoof calendar servers and obtain sensitive information via an arbitrary certificate. Affected: iOS
Google Chrome multiple vulnerabilities (Linux)
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep10lin.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities Linux Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...
Google Chrome < 6.0.472.53 Multiple Vulnerabilities (Sep 2010) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Chrome multiple vulnerabilities (Windows) Sep10
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnsep10win.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities Windows Sep10 Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks...
CVE-2010-3253
CVE-2010-3253 concerns Google Chrome prior to version 6.0.472.53, where the notification permissions implementation is exposed to memory corruption, enabling denial of service and possibly other unspecified impact via unknown vectors. The CVE appears in multiple feeds (NVD and OpenVAS entries ref...
CVE-2009-3253
CVE-2009-3253 describes a stack-based buffer overflow in TriceraSoft Swift Ultralite 1.032 triggered by a long string in an .M3U playlist. This allows remote attackers to cause a crash or execute arbitrary code. Public references indicate exploits/public discussions exist (e.g., Exploit-DB). Vend...
