87 matches found
Debian: Security Advisory (DSA-3890-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-3890
CVE-2017-3890 is a reflected cross-site scripting vulnerability in BlackBerry WatchDox Server components, affecting Appliance-X (version 1.8.1 and earlier) and vAPP (versions 4.6.0–5.4.1). The issue allows a remote attacker to cause script execution in the context of the affected browser by convi...
CVE-2016-3890
The CVE-2016-3890 issue concerns the Java Debug Wire Protocol (JDWP) implementation in adb/sockets.cpp across Android 4.x (before 4.4.4), 5.0.x (before 5.0.2), 5.1.x (before 5.1.1), and 6.x (before 2016-09-01). The root cause is mishandling of socket close operations, which can allow attackers to...
CVE-2014-3890
Affected product : Silex SX-2000WG devices with firmware before 1.5.4. Vulnerability : remote attacker can cause a denial of service (connectivity outage) by sending a crafted IP packet (CVE-2014-3890). Impact : DoS leading to loss of connectivity. Root cause / vector : handling of IP packets in ...
CVE-2013-3890
Summary (CVE-2013-3890) : Microsoft Excel 2007 SP3, Excel Viewer, and Office Compatibility Pack SP3 are affected by memory corruption vulnerabilities that allow remote code execution via a crafted Office document. The issue is documented as two memory-corruption vulnerabilities enabling arbitrary...
Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (2885080)
This host is missing an important security update according to Microsoft Bulletin MS13-085. OpenVAS Vulnerability Test $Id: secpodmsofficecompatibilitypackms13-085.nasl 6125 2017-05-15 09:03:42Z teissa $ Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities 2885080 Authors: An...
Microsoft Office Excel Remote Code Execution Vulnerabilities (2885080)
This host is missing an important security update according to Microsoft Bulletin MS13-085. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Office Remote Code Execution Vulnerabilities (2885080) - Mac OS X
This host is missing an important security update according to Microsoft Bulletin MS13-085. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS13-085: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2885080)
The remote Windows host is running a version of Microsoft Office, Microsoft Excel, Office Compatibility Pack, or Microsoft Excel Viewer that is affected by remote code execution vulnerabilities in the way that Microsoft Excel parses file contents. CVE-2013-3889, CVE-2013-3890. If an attacker can...
CVE-2012-3890
The CVE-2012-3890 issue affects Winamp prior to version 5.63, due to a flaw in the in_mod.dll when parsing Impulse Tracker (.it) files, allowing remote attackers to trigger heap memory corruption and potentially other impacts. Microsoft’s advisory MSVR12-011 notes multiple vulnerabilities in Winamp
Google Chrome < 15.0.874.102 Multiple Vulnerabilities
Binary data 6050.pasl...
CVE-2011-3890
Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to video source handling...
CVE-2011-3890
Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to video source handling...
CVE-2011-3890
CVE-2011-3890: A use-after-free in Google Chrome prior to 15.0.874.102 related to video source handling can allow remote attackers to cause a denial of service or possibly other impact. Affects Chrome versions before the fixed build; exploitation details and in-wild activity are not described in ...
Chrome Stable Release
The Google Chrome team is happy to announce the arrival of Chrome 15.0.874.102 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame. Chrome 15 contains some really great improvements including a new New Tab page. You can read about it more on the Google Chome blog. Security fixes and...
CVE-2010-3890
IBM OmniFind Enterprise Edition (pre-9.1) contains multiple vulnerabilities tied to the administration interface. The primary issue CVE-2010-3890 is a Cross-Site Scripting (XSS) flaw where the GET parameter command in ESAdmin/collection.do is embedded into HTML without input validation, enabling ...
CVE-2009-3890
Unrestricted file upload vulnerability in the wpcheckfiletype function in wp-includes/functions.php in WordPress before 2.8.6, when a certain configuration of the modmime module in the Apache HTTP Server is enabled, allows remote authenticated users to execute arbitrary code by posting an...
CVE-2009-3890
Unrestricted file upload vulnerability in the wpcheckfiletype function in wp-includes/functions.php in WordPress before 2.8.6, when a certain configuration of the modmime module in the Apache HTTP Server is enabled, allows remote authenticated users to execute arbitrary code by posting an...
CVE-2009-3890
WordPress before 2.8.6 has an Unrestricted file upload vulnerability in wp_check_filetype, exploitable when mod_mime is configured in Apache. Remote authenticated users can upload an attachment with a multiple-extension filename (e.g., name.php.jpg) and then access it via wp-content/uploads/ to e...
