Microsoft WMI Administrative Tools WBEMSingleView.ocx Code Execution (CVE-2010-3973)

Windows Management Instrumentation WMI is a set of extensions to the Windows Driver Model that provides an operating system interface through which instrumented components provide information and notification. The WMI Administrative Tools are made of four tools: WMI CIM Studio, WMI Object Browser...

CVE-2010-3973

CVE-2010-3973 affects the WBEMSingleView.ocx ActiveX control (WBEMAdministrative Tools 1.1 and earlier) on Windows XP SP2/SP3; a crafted argument to AddContextRef may allow remote code execution due to an untrusted pointer dereference. Public references note multiple related ActiveX controls and ...

CVE-2009-3973

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a browse action, a different vector than CVE-2008-5629...

CVE-2008-3973

Unspecified vulnerability in the SQLPlus Windows GUI component in Oracle Database allows local users to affect confidentiality via unknown vectors...

CVE-2008-3973

Technical details about CVE-2008-3973 are not publicly provided in the connected documents. They note an unspecified vulnerability in the SQL*Plus Windows GUI with limited information; monitor Oracle CPU advisories and vendor updates for specifics.

CVE-2009-3973

creationtimestamp| type| source ---|---|--- 2008-11-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7256 2009-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9511...

Debian: Security Advisory (DSA-958-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-3973

CVE-2007-3973 affects JBlog 1.0 and involves multiple cross-site scripting (XSS) vulnerabilities. Remote attackers can inject arbitrary web script or HTML through (1) the id parameter to index.php, or (2) the search parameter, or (3) the theme cookie to recherche.php. The root cause is input hand...

CVE-2006-3973

CVE-2006-3973 affects My Firewall Plus 5.0 Build 1119. The issue is that the application does not verify whether explorer.exe is running before launching iexplore.exe via the Test Your Firewall feature, allowing local users to escalate to SYSTEM privileges. The vulnerability is locally exploitabl...

Secunia Research: My Firewall Plus Privilege Escalation Vulnerability

====================================================================== Secunia Research 21/11/2006 - My Firewall Plus Privilege Escalation Vulnerability - ====================================================================== Table of Contents Affected...

[SECURITY] [DSA 958-1] New drupal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 958-1 [email protected] http://www.debian.org/security/ Martin Schulze January 27th, 2006 http://www.debian.org/security/faq -...

CVE-2005-3973

Drupal v4.5.x (4.5.0–4.5.5) and v4.6.x (4.6.0–4.6.3) are affected by multiple cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via various HTML tags and values (examples include the legend tag and the value parameters in label an...