75 matches found
Slackware 13.1 / current : mozilla-thunderbird (SSA:2010-202-02)
New mozilla-thunderbird packages are available for Slackware 13.1 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-202-02. The text itself is...
About the security content of QuickTime 7.6.9
About the security content of QuickTime 7.6.9 Last Modified: December 07, 2010 Article: HT4447 Email this article Print this page Summary This document describes the security content of QuickTime 7.6.9. For the protection of our customers, Apple does not disclose, discuss, or confirm security...
QuickTime < 7.6.9 Multiple Vulnerabilities
Binary data 5725.prm...
QuickTime < 7.6.9 Multiple Vulnerabilities (Mac OS X)
The version of QuickTime installed on the remote Mac OS X host is older than 7.6.9. Such versions contain several vulnerabilities : - A heap buffer overflow in QuickTime's handling of JP2 images may lead to an application crash or arbitrary code execution. CVE-2010-3787 - Uninitialized memory...
CVE-2010-3787
CVE-2010-3787 describes a heap-based buffer overflow in Apple QuickTime handling of JPEG2000 (JP2) images on Mac OS X 10.6.x prior to 10.6.5. A crafted JP2 image can allow a remote attacker to execute arbitrary code or cause a denial of service (application crash). The vulnerability is addressed ...
CVE-2009-3787
Vivvo CMS 4.1.5.1 is affected by CVE-2009-3787, a directory-traversal/file-disclosure flaw in the files.php handler. The vulnerability allows reading arbitrary files via the file parameter when a logs/ segment is injected between two dots, filtered to a ../ sequence. NVD lists a base score of 5.0...
CVE-2009-3787
creationtimestamp| type| source ---|---|--- 2009-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9979...
CVE-2008-3787
Summary: CVE-2008-3787 affects Web Directory Script ≤ 2.0. It exposes a vulnerability in listing_view.php where the name parameter can be used for SQL injection, allowing remote attackers to execute arbitrary SQL commands. The CVSS v2 base score is 7.5 (HIGH) with network access, low attack compl...
CVE-2008-3787
creationtimestamp| type| source ---|---|--- 2008-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6298...
CVE-2007-3787
The CVE covers the eSoft InstaGate EX2 UTM device where the admin password change flow does not require the existing password, enabling privilege escalation via CSRF or similar attacks from an unattended workstation. Affected component: admin password change mechanism. Root cause: missing verific...
CVE-2006-3787
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API function, which allows local users to cause a denial of service crash and bypass protection mechanisms by calling CreateRemoteThread...
CVE-2006-3787
The CVE-2006-3787 issue affects Sunbelt Kerio Personal Firewall 4.3.x prior to 4.3.268 where kpf4ss.exe does not properly hook CreateRemoteThread. This allows a local user to trigger a crash (denial of service) and bypass protection mechanisms by calling CreateRemoteThread. The vulnerability is d...
CVE-2005-3787
CVE-2005-3787 concerns multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin prior to 2.6.4-pl4 . The issues allow remote attackers to inject arbitrary script/HTML via (1) the cookie-based login panel, (2) the title parameter, and (3) the table creation dialog. The connected documents...
XSS vulnerabilities
PMASA-2005-7 Announcement-ID: PMASA-2005-7 Date: 2005-11-23 Summary XSS vulnerabilities Description During the course of phpMyAdmin 2.6.4 development, some XSS vulnerabilities were fixed but were not documented here. The cookie-based login panel, the title parameter and the table creation dialog...