66 matches found
KLA10884 Code execution vulnerability in Microsoft Office
An improper RTF handling was found in Microsoft Office. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories CVE-2016-3263 CVE-2016-3209 CVE-2016-3262 CVE-2016-7182 CVE-2016-339...
Microsoft Windows GDI+ Information Disclosure (MS16-120: CVE-2016-3262)
An information disclosure vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the True Type Font TTF driver handles objects in memory. A remote attacker could exploit this vulnerability by enticing a target user to open a specially crafted EMF fil...
Debian DSA-3262-1 : xen - security update (Venom)
Jason Geffner discovered a buffer overflow in the emulated floppy disk drive, resulting in the potential execution of arbitrary code. This only affects HVM guests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debia...
Debian: Security Advisory (DSA-3262-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cisco IOS XE LISP ITR DoS (CSCun73782)
The remote Cisco device is potentially affected by an issue related to the handling of certain parameters in Locator/ID Separation Protocol LISP control messages sent to the ingress tunnel router ITR component. A remote, unauthenticated attacker could exploit this issue by sending specially craft...
CVE-2014-3262
CVE-2014-3262 affects Cisco IOS 15.3(3)S and earlier and IOS XE. The issue is improper validation of parameters in ITR control messages for Locator/ID Separation Protocol (LISP) processing, allowing a remote, unauthenticated attacker to trigger a denial of service by sending malformed LISP contro...
CVE-2013-3262
The CVE-2013-3262 entry concerns an XSS vulnerability in the WordPress Download Monitor plugin for admin/admin.php, exploitable via the p parameter. Affected version: Download Monitor before 3.3.6.2. Root cause: improper handling/sanitization of user-supplied input in the p parameter allows remot...
[security bulletin] HPSBMU02815 SSRT100715 rev.3 - HP SiteScope SOAP Security Issues, Remote Disclosure of Information, Remote Code Execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03489683 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03489683 Version: 3 HPSBMU02815...
CVE-2012-3262
HP SiteScope SOAP vulnerability CVE-2012-3262 affects SiteScope versions 11.10–11.12. The issue allows remote code execution via the SOAP API due to vulnerabilities in the SOAP features, with CVSS 2.0 base score 10.0 (high). HP’s remediation is SiteScope update v11.13, and to mitigate, disable th...
Debian Security Advisory DSA 2337-1 (xen)
The remote host is missing an update to xen announced via advisory DSA 2337-1. OpenVAS Vulnerability Test $Id: deb23371.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2337-1 xen Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
[SECURITY] [DSA 2337-1] xen security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2337-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 6, 2011 http://www.debian.org/security/faq -...
CVE-2011-3262
tools/libxc/xcdombzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service management software infinite loop and management domain resource consumption via unspecified vectors related to "Lack of error checking in the decompression loop."...
CVE-2011-3262
CVE-2011-3262 affects Xen hypervisor versions 3.2–4.1. It stems from lack of error checking in the decompression loop of the bzimage loader, allowing a local attacker to trigger a denial-of-service via infinite loop/resource consumption in management domain. Connected advisories confirm the same ...
CVE-2010-3262
Cross-site scripting XSS vulnerability in Flock Browser 3.x before 3.0.0.4114 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed...
CVE-2010-3262
The CVE-2010-3262 affects Flock Browser 3.x prior to 3.0.0.4114, where a crafted RSS feed can trigger a cross-site scripting (XSS) vulnerability. The issue is a client-side XSS in the RSS feed handling, allowing arbitrary script or HTML execution when the feed is viewed. Public sources consistent...
[FLOCK-SA-2010-02] Flock Browser: A malicious RSS feed can bypass cross origin protection (XSS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 FLOCK-SA-2010-02 http://flock.com/security/ Title: A malicious RSS feed can bypass cross origin protection XSS Impact: High Announced on: 2010-09-09 Affected Products: Flock 3 versions prior to 3.0.0.4114 CVEs cve.mitre.org: CVE-2010-3262 Details: A...
IBM Tivoli Identity Manager SSUI跨站脚本漏洞
CVE ID: CVE-2009-3262 IBM Tivoli Identity Manager提供一个安全、自动化且基于策略的解决方案，帮助有效地管理IT环境中用户帐号、访问权限和密码的创建到终止的整个过程。 Tivoli Identity Manager的Self Service UI（SSUI）没有正确地过滤用户所提交的请求，通过认证的远程攻击者可以通过配置文件的last name字段执行跨站脚本攻击，导致注入并执行任意脚本或HTML代码。 IBM Tivoli Identity Manager 5.0 厂商补丁： IBM ---...
CVE-2009-3262
IBM Tivoli Identity Manager (ITIM) 5.0.0.5 Self Service UI (SSUI) is affected by a Cross-site scripting (XSS) vulnerability: remote authenticated users can inject arbitrary script/HTML via the last name field in a profile due to insufficient input filtering. Impact is XSS within authenticated ses...
CVE-2009-3262
Cross-site scripting XSS vulnerability in the Self Service UI SSUI in IBM Tivoli Identity Manager ITIM 5.0.0.5 allows remote authenticated users to inject arbitrary web script or HTML via the last name field in a profile...