Stack overflow

Multiple stack-based buffer overflows in msgserver.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service crash and execute arbitrary code via a 1 long parameter value, 2 crafted string size field, or 3 long Parameter Name string in a package with opcode 0x43 and sub...

PT-2012-5341 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver ABAP versions 7.x Description: The issue allows remote attackers to cause a denial of service and execute arbitrary code via a long parameter value, crafted string size field, or long Parameter Name string in a package with opco...

Gentoo Security Advisory GLSA 201111-05 (chromium v8)

The remote host is missing updates announced in advisory GLSA 201111-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Google Chrome < 15.0.874.121 V8 Out-of-bounds Write Unspecified Remote Memory Corruption

The version of Google Chrome installed on the remote host is earlier than 15.0.874.121 and is affected by an out-of-bounds memory write in the V8 JavaScript engine. Such an error can cause data corruption, application crashes or can potentially allow code execution. %NASLMINLEVEL 70300 C Tenable...

Google Chrome V8 Remote Code Execution Vulnerability (Mac OS X)

The host is installed with Google Chrome and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodgooglechromev8remotecodeexecvulnmacosx.nasl 7052 2017-09-04 11:50:51Z teissa $ Google Chrome V8 Remote Code Execution Vulnerability Mac OS X Authors: Rachana Shetty...

Google Chrome V8 Remote Code Execution Vulnerability - Windows

Google Chrome is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3900

CVE-2011-3900 affects Google Chrome prior to 15.0.874.121, specifically a vulnerability in the V8 engine where an out-of-bounds write could lead to denial of service or potentially other impact. Public references in the connected documents confirm the Chrome/Chromium V8 context and the remediatio...

CVE-2010-3900

Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312...

CVE-2010-3900

Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312...

CVE-2010-3900

CVE-2010-3900 affects Midori before 0.2.5 when used with WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91. Root cause: X.509 certificates are not verified, allowing MITM attackers to spoof HTTPS sites with a crafted server certificate. Impact is Spoofed HTTPS sites and potential data exposure. ...

CVE-2010-3900

Midori before 0.2.5, when WebKitGTK+ before 1.1.14 or LibSoup before 2.29.91 is used, does not verify X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary https web sites via a crafted server certificate, a related issue to CVE-2010-3312...

IBM BladeCenter Management Module DoS

DoS on tcp/3900 traffic processing...

CVE-2009-3900

CVE-2009-3900 affects IBM PowerHA Cluster Management on AIX (versions 5.4/5.4.1/5.5/6.1). The vulnerability allows a remote attacker to modify the operating-system configuration by sending packets to the godm port (6177/tcp). The provided connected Nessus entry confirms an unspecified remote conf...

CVE-2008-3900

The CVE-2008-3900 entry concerns Intel firmware PE94510M.86A.0050.2007.0710.1559 where pre-boot authentication passwords are stored in the BIOS keyboard buffer and the buffer is not cleared after use. This allows local users to read the raw memory locations associated with the buffer to obtain se...

CVE-2006-3900

The CVE-2006-3900 entry describes a Cross-site Scripting (XSS) vulnerability in TP-Book, affecting guestbook.php in version 1.00 and earlier. The issue arises via the name parameter, allowing remote attackers to inject arbitrary web script or HTML. The NVD CVSS vector (AV:N/AC:M/Au:N/C:P/I:P/A:P)...

CVE-2005-3900

CVE-2005-3900 affects Macromedia Breeze Communication Server and Breeze Live Server (version 5.1 and earlier). The vulnerability arises from insufficient validation of certain RTMP data, which can cause a denial of service (instability or crash). The NVD description notes this was demonstrated wi...