148 matches found
CVE-2012-3750
Apple iOS vulnerability CVE-2012-3750 affects the Passcode Lock feature prior to iOS 6.0.1, where a state management issue could allow a physically proximate attacker with device access to bypass the passcode and view Passbook passes. The issue is localized to the lock state handling and is mitig...
Authentication flaw
Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service device reload by completing local web authentication quickly, aka Bug ID CSCts88664...
RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Windows
RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-3750
rjrmrpln.dll in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 does not properly validate file contents that are used during interaction with a heap buffer, which allows remote attackers to execute arbitrary code via crafted Name Value...
CVE-2010-3750
This CVE (CVE-2010-3750) affects RealNetworks RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.4, and RealPlayer Enterprise 2.1.2. The issue is a heap-buffer interaction flaw in rjrmrpln.dll where file contents are not properly validated during parsing of Name Value Property (NVP) elements in logical ...
RealPlayer for Windows < Build 12.0.0.879 Multiple Vulnerabilities
According to its build number, the installed version of RealPlayer on the remote Windows host has multiple buffer overflow vulnerabilities : - A RealPlayer malformed 'IVR' pointer index code execution vulnerability exists. CVE-2010-2996, CVE-2010-2998 - A RealPlayerActiveX unauthorized file acces...
CVE-2009-3750
SQL injection vulnerability in read.php in ToyLog 0.1 allows remote attackers to execute arbitrary SQL commands via the idm parameter...
CVE-2009-3750
CVE-2009-3750 is a confirmed SQL injection vulnerability in ToyLog 0.1, exploitable via read.php through the idm parameter. The NVD entry describes remote arbitrary SQL execution with a CVSS v2 base score of 7.5 (HIGH), indicating partial confidentiality, integrity, and availability impact. Conne...
Code injection
Unspecified vulnerability in the Wireless LAN Controller WLC TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to...
Design/Logic Flaw
The Cisco Wireless LAN Controller WLC, Cisco Catalyst 6500 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.2 allow remote attackers to cause a denial of service web authentication outage or device reload...
CVE-2009-0061
Unspecified vulnerability in the Wireless LAN Controller WLC TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module WiSM, and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to...
CVE-2009-0062
CVE-2009-0062 concerns a privilege-escalation vulnerability in Cisco Wireless LAN Controllers (WLCs), Cisco Catalyst 6500 WiSM modules, and Cisco Catalyst 3750 Integrated WLCs running software 4.2.173.0. The issue allows a remote authenticated user at the Lobby Admin or Local Management User leve...
CVE-2009-0058
The CVE-2009-0058 issue affects Cisco Wireless LAN Controllers (WLCs), Cisco Catalyst 6500 WiSM modules, and Catalyst 3750 Integrated WLCs. The vulnerability exists in software versions 4.x prior to 4.2.176.0 and 5.x prior to 5.2, allowing remote attackers to cause a denial of service (web authen...
CVE-2009-0059
Cisco CVE-2009-0059 affects Cisco Wireless LAN Controllers (WLCs), Cisco Catalyst 6500 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated WLCs. Vulnerable software versions are 4.x before 4.2.176.0 and 5.2.x before 5.2.157.0. The issue allows remote attackers to cause a denial of...
CVE-2008-3750
creationtimestamp| type| source ---|---|--- 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6949...
CVE-2008-3750
SQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3750
The CVE-2008-3750 entry concerns a SQL injection in the YourFreeWorld URL Rotator Script, specifically in tr.php, where the id parameter can be exploited to execute arbitrary SQL commands. Affected component is the tr.php script of the YourFreeWorld URL Rotator; vulnerability type is SQL injectio...
SuSE 10 Security Update : python (ZYPP Patch Number 3750)
This update fixes an off-by-one error in the PyLocalestrxfrm function which can lead to a memory leak. CVE-2007-2052 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2007-3750
CVE-2007-3750 : Heap-based buffer overflow in Apple QuickTime prior to 7.3. The flaw occurs when parsing the Sample Table Sample Descriptor (STSD) atom in QuickTime movie files, allowing a remote attacker to execute arbitrary code. Exploitation described as requiring the user to open a crafted Qu...
QuickTime < 7.3 Multiple Vulnerabilities (Mac OS X)
The version of QuickTime installed on the remote Mac OS X host is older than 7.3. Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted file with QuickTime. C Tenable Network...