83 matches found
CVE-2014-3716
Xen 4.4.x is affected by CVE-2014-3716: a mis-check of alignment in a DTB header in a 32-bit guest kernel can be exploited by a local user to cause a denial of service (crash). The provided connected documents confirm the vulnerability in Xen 4.4.x and describe the impact as local denial of servi...
Sun Java JRE XML Signature Command Injection (102993) (Unix)
The version of Sun Java Runtime Environment JRE installed on the remote host reportedly does not securely process XSLT stylesheets containing XSLT Transforms in XML Signatures. If an attacker can pass a specially crafted XSLT stylesheet to a trusted Java application running on the remote host, it...
Apple Mac OS X CoreText相关越界内存读取写入漏洞(CVE-2012-3716)
BUGTRAQ ID: 55623 CVE ID: CVE-2012-3716 Apple Mac OS X是苹果电脑操作系统软件。 使用CoreText的Apple Mac OS X处理文本字形时存在边界检查漏洞，可导致越界读取和写入，造成应用终止或执行任意代码。 0 Apple Macintosh OS X 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（APPLE-SA-2012-09-19-2）以及相应补丁: APPLE-SA-2012-09-19-2：OS X Mountain Lion v10.8.2, OS X Lion v10.7.5 and...
Mac OS X 10.7.x < 10.7.5 Multiple Vulnerabilities (BEAST)
The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.5. The newer version contains multiple security-related fixes for the following components : - Apache - BIND - CoreText - Data Security - ImageIO - Installer - International Components for Unicode - Kernel - Mail - PHP ...
Debian: Security Advisory (DSA-2121-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 2121-1 (typo3-src)
The remote host is missing an update to typo3-src announced via advisory DSA 2121-1. OpenVAS Vulnerability Test $Id: deb21211.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2121-1 typo3-src Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
CVE-2010-3716
The beusercreation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a crafted POST request that creates a user account with arbitrary group memberships...
CVE-2010-3716
CVE-2010-3716 is a TYPO3 vulnerability where malicious editors with user-creation permission could escalate privileges by creating new users in arbitrary groups due to input validation weakness in the be_user_creation task. Affected: TYPO3 4.2.x pre-4.2.15 and 4.3.x pre-4.3.7. Documented in multi...
[SECURITY] [DSA 2121-1] New TYPO3 packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2121-1 [email protected] http://www.debian.org/security/ Florian Weimer October 19, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2121-1] New TYPO3 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2121-1 [email protected] http://www.debian.org/security/ Florian Weimer October 19, 2010 http://www.debian.org/security/faq -...
DSA-2121-1 typo3-src - several vulnerabilities
Bulletin has no description...
CVE-2009-3716
CVE-2009-3716 describes an unrestricted file upload vulnerability in MCshoutbox 1.1. The flaw exists in the admin.php upload handling, allowing remote authenticated users to upload a file with an executable extension and then access it via a direct request to the file under the smilies/ directory...
CVE-2009-3716
creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9205...
Gentoo Security Advisory GLSA 200709-15 (jrockit-jdk-bin)
The remote host is missing updates announced in advisory GLSA 200709-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-3716
CVE-2008-3716 is a CSRF vulnerability in Harmoni prior to 1.6.0 that allows remote attackers to perform administrative modifications via a (1) save or (2) delete action to an unspecified component. The NVD entry lists a base score of 6.0 (Medium) with network attack vector, requiring user interac...
Sql injection
Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to...
CVE-2007-3716
The Java XML Digital Signature implementation in Sun JDK and JRE 6 before Update 2 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715...
CVE-2007-3716
The Java XML Digital Signature implementation in Sun JDK and JRE 6 before Update 2 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to CVE-2007-3715...
CVE-2007-3716
CVE-2007-3716 affects Sun JDK/JRE 6 before Update 2, where the XML Digital Signature implementation mishandles XSLT transforms in signatures. A crafted XSLT stylesheet could allow a remote attacker to execute arbitrary code on the affected system. The CVE is tied to a related issue (CVE-2007-3715...