83 matches found
CVE-2013-3757
CVE-2013-3757 affects Oracle Solaris (8–11) in the SMF/File Locking Services component. The linked Nessus/CVSS details describe an easily exploitable, unauthenticated remote vector over NFS that can modify Solaris data and cause partial denial of service. Affected subcomponent is SMF/File Locking...
Solaris 10 (x86) : 148242-05 (deprecated)
SunOS 5.10x86: statd patch. Date this patch was last updated by Sun : Aug/15/14 This plugin has been deprecated and either replaced with individual 148242 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...
Memory Corruption in QuickTime Could Allow Arbitrary Code Execution
Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Apple QuickTime software version 7.7.2 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor,...
QuickTime < 7.7.3 Multiple Vulnerabilities (Windows)
Binary data 6620.prm...
QuickTime < 7.7.3 Multiple Vulnerabilities (Windows)
The version of QuickTime installed on the remote Windows host is older than 7.7.3 and therefore is reportedly affected by the following vulnerabilities : - A buffer overflow exists in the handling of REGION records in PICT files. CVE-2011-1374 - A memory corruption issue exists in the handling of...
CVE-2012-3757
CVE-2012-3757 affects Apple QuickTime before 7.7.3. The root cause is memory corruption in the handling of PICT files, allowing remote code execution or a denial of service when a crafted PICT file is opened. Exploitation requires a user to open a malicious file; impact could be full user rights ...
APPLE-SA-2012-11-07-1 QuickTime 7.7.3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2012-11-07-1 QuickTime 7.7.3 QuickTime 7.7.3 is now available and addresses the following: QuickTime Available for: Windows 7, Vista, XP SP2 or later Impact: Viewing a maliciously crafted PICT file may lead to an unexpected application...
CVE-2011-3757
CVE-2011-3757 affects Moodle 2.0.1 and allows information disclosure through direct requests to certain PHP files, causing the installation path to be revealed in an error message (example: webservice/xmlrpc/locallib.php). The connected documents confirm the affected software/version and the root...
CVE-2010-3757
CVE-2010-3757 describes a format-string vulnerability in the _Eventlog function of FastBackServer.exe (Server) affecting IBM Tivoli Storage Manager (TSM) FastBack v5.5.0.0–5.5.6.0 and v6.1.0.0–6.1.0.1. The flaw allows remote attackers to execute arbitrary code via format string specifiers appeari...
CVE-2005-3757
creationtimestamp| type| source ---|---|--- 2010-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16907 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/googleproxystylesheetexec.rb 2025-02-06...
CVE-2009-3757
CVE-2009-3757 affects the XenServer Resource Kit sample code in Citrix XenCenterWeb. The vulnerability is multiple cross-site scripting (XSS) flaws in the web UI, exploitable through user-controlled input in PHP scripts: config/edituser.php (username), console.php (location, sessionid, vmname), f...
CVE-2009-3757
creationtimestamp| type| source ---|---|--- 2009-07-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9106...
Google Appliance ProxyStyleSheet Command Execution
This module exploits a feature in the Saxon XSLT parser used by the Google Search Appliance. This feature allows for arbitrary java methods to be called. Google released a patch and advisory to their client base in August of 2005 GA-2005-08-m. The target appliance must be able to connect back to...
CVE-2008-3757
SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3757
SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
openSUSE 10 Security Update : file (file-3757)
This update fixes an integer overflow in function fileprintf of file. This bug can be used to execute arbitrary code. CVE-2007-2799 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update file-3757. T...
CVE-2007-3757
CVE-2007-3757 describes a vulnerability in Apple iPhone 1.1.1 where the embedded Safari browser mishandles tel: links, allowing a crafted link to cause the user to initiate a call to a different number than the one displayed. The issue affects the iPhone’s handling of tel: hyperlinks; exploitatio...
CVE-2006-3757
CVE-2006-3757 affects Zen Cart 1.3.0.2. The vulnerability in index.php allows remote attackers to obtain sensitive information by passing empty (GET, SESSION, POST, COOKIE, SESSION) parameters, causing an error message that reveals the installation path. The description notes this may stem from a...
CVE-2005-3757
The CVE-2005-3757 issue affects the Saxon XSLT parser used by Google Mini Search Appliance (and possibly Google Search Appliance). The vulnerability arises from dangerous Java methods (system-property, sys:getProperty, run:exec) in the select attribute of xsl:value-of in XSLT style sheets, enabli...
