114 matches found
UBUNTU-CVE-2016-3845
The video driver in the kernel in Android before 2016-08-05 on Nexus 5 devices allows attackers to gain privileges via a crafted application, aka internal bug 28399876...
CVE-2016-3845
CVE-2016-3845 refers to an elevation of privilege in the kernel video driver on Nexus 5 devices running Android prior to 2016-08-05. The vulnerability could allow a local attacker with a crafted application to gain higher privileges within the kernel context. The issue is tied to the kernel video...
CVE-2015-3845
CVE-2015-3845 affects Android Binder’s Parcel handling: the Parcel::appendFrom function in libs/binder/Parcel.cpp does not consider parcel boundaries when identifying binder objects, in Android versions before 5.1.1 LMY48M. The underlying flaw can allow a crafted application to obtain privileges ...
CVE-2014-3845
Cross-site request forgery CSRF vulnerability in the TinyMCE Color Picker plugin before 1.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change plugin settings via unknown vectors. NOTE: some of these details are obtained from third par...
CVE-2014-3845
CVE-2014-3845 affects the TinyMCE Color Picker WordPress plugin before version 1.2. The vulnerability is a Cross-site request forgery (CSRF) that allows remote attackers to hijack the authentication of unspecified users to perform requests that change plugin settings via unknown vectors. The unde...
CVE-2013-3845
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...
CVE-2013-3845
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...
CVE-2013-3845
CVE-2013-3845 refers to multiple memory-corruption vulnerabilities in Microsoft Internet Explorer 8 and 9. The description and connected documents confirm remote code execution and potential memory corruption via a crafted web site, with the issue affecting IE8/IE9 through various components (not...
CVE-2013-3845
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...
Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities (2870699)
This host is missing a critical security update according to Microsoft Bulletin MS13-069. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft Internet Explorer Memory Corruption (MS13-069: CVE-2013-3845)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer...
CVE-2012-3845
CVE-2012-3845 concerns LAN Messenger, affected in versions 1.2.28 and earlier. The vulnerability is a buffer overflow in the initiation request that can be triggered remotely, causing a denial of service (crash). Public references in the initial records list exploit resources, but the connected d...
CVE-2012-3845
creationtimestamp| type| source ---|---|--- 2012-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18816...
Apple Safari 5.1.2插件卸载远程代码执行漏洞
BUGTRAQ ID: 52325 CVE ID: CVE-2011-3845 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器,使用了KDE的KHTML作为浏览器的运算核心。 Apple Safari在实现上存在远程代码执行漏洞,远程攻击者可利用此漏洞在受影响应用中执行任意代码 0 Apple Safari 5.1.2 7534.52.7 For Windows 厂商补丁: Apple ----- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://support.apple.com/...
CVE-2011-3845
CVE-2011-3845 describes a use-after-free in Apple Safari 5.1.2 where a plug‑in with a blocking function, during user interaction, allows a crafted page to trigger remote arbitrary code execution due to a race between an API call and plug‑in unloading. Affected component: Safari browser with plug‑...
HP-UX PHSS_40705 : s700_800 11.11 OV NNM7.01 Intermediate Patch 13
s700800 11.11 OV NNM7.01 Intermediate Patch 13 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. The vulnerability could be exploited remotely to execute arbitrary code. HPSBMA02424...
HP OpenView Network Node Manager多个远程代码执行漏洞
HP OpenView Network Node Manager是一款HP公司开发和维护的网络管理系统软件,具有强大的网络节点管理功能。 HP OpenView Network Node Manager存在多个安全漏洞: CVE-2009-3845: CNCVE ID:CNCVE-20090898 CNCVE-20093845 CNCVE-20093846 CNCVE-20093849 CNCVE-20093848 CNCVE-20094176 CNCVE-20094177 CNCVE-20094178 CNCVE-20094179 CNCVE-20094180 CNCVE-200941...
HP-UX PHSS_40375 : s700_800 11.X OV NNM7.53 IA-64 Intermediate Patch 25
s700800 11.X OV NNM7.53 IA-64 Intermediate Patch 25 : The remote HP-UX host is affected by multiple vulnerabilities : - Potential security vulnerabilities have been identified with the Java Runtime Environment JRE and Java Developer Kit JDK delivered with HP OpenView Network Node Manager OV NNM...
DSquare Exploit Pack: D2SEC_HPNNM2
Name| d2sechpnnm2 ---|--- CVE| CVE-2009-3845 Exploit Pack| D2ExploitPack Description| HP Network Node Manager Command Injection Vulnerability Notes|...
CVE-2009-3845
HP OpenView Network Node Manager (OV NNM) vulnerable on port 3443 HTTP server for OV NNM versions 7.01, 7.51 and 7.53. The hostname parameter is not properly sanitized in Perl/CGI scripts, allowing remote attackers to inject and execute arbitrary commands. Documented components include setMon.ovp...