VMware存在多个安全漏洞

BUGTRAQ ID:30934 CVE ID：CVE-2008-3691 CVE-2008-3692 CVE-2008-3693 CVE-2008-3694 CVE-2008-3695 CVE-2008-3696 CNCVE ID：CNCVE-20083691 CNCVE-20083692 CNCVE-20083693 CNCVE-20083694 CNCVE-20083695 CNCVE-20083696 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 多个VMWare...

VMSA-2008-0014:Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues.

VMSA-2008-0014.3 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX, VMware VCB address information disclosure, privilege escalation and other security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0014.3 VMware Security...

CVE-2007-3693-gobi.txt

http://int21.de/cve/CVE-2007-3693-gobi.txt Cross site scripting and information disclosure in gobi/helma security advisory References: http://gobi.helma.org/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3693 Description: Cross site scripting describes attacks that allow to insert...

[Full-disclosure] CVE-2007-3693: Cross site scripting and information disclosure in gobi/helma

http://int21.de/cve/CVE-2007-3693-gobi.txt Cross site scripting and information disclosure in gobi/helma security advisory References: http://gobi.helma.org/ https://vulners.com/cve/CVE-2007-3693 Description: Cross site scripting describes attacks that allow to insert malicious html or javascript...

CVE-2007-3693

The CVE-2007-3693 issue affects the gobi CMS built on the Helma application server. The vulnerability is a cross-site scripting (XSS) flaw in the search function, where user input sent to the q parameter can be exploited to inject arbitrary HTML/JavaScript. The provided materials indicate that th...

CVE-2006-3693

Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks \ in an argument to the 1 mount-loop mount-loop.c or 2 umount-loop umount-loop.c command, which is not filtered in a system function call...

CVE-2006-3693

Rocks Clusters 4.1 and earlier are affected by CVE-2006-3693. Local users can gain privileges via commands enclosed with escaped backticks (`) in an argument to mount-loop or umount-loop, which are not filtered in a system function call. The underlying issue is insufficient filtering of backtick-...

CVE-2005-3693

CVE-2005-3693 concerns the AxWebRemoveCtrl ActiveX control from SunnComm used for uninstalling MediaMax DRM. The vulnerability enables remote attackers to download and execute arbitrary code via the control from an arbitrary URL when a user visits a malicious site. This is documented as an Active...