1033 matches found
Fedora 18 : xen-4.2.1-7.fc18 (2013-2225)
adjust gcc 4.8 fixes guest using oxenstored can crash host or exhaust memory XSA-38, CVE-2013-0215 907888, guest using AMD-Vi for PCI passthrough can cause denial of service XSA-36, CVE-2013-0153 910914, fixes for gcc 4.8 Note that Tenable Network Security has extracted the preceding description...
CVE-2013-0254
CVE-2013-0254 affects the Qt QSharedMemory facility: in Qt 5.0.0, 4.8.x before 4.8.5, 4.7.x before 4.7.6, and other versions including 4.4.0, QSharedMemory creates shared memory segments with world-readable/world-writable permissions, enabling local users to read sensitive data or modify critical...
CVE-2011-5222
SQL injection vulnerability in rub2w.php in PHP Flirt-Projekt 4.8 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the rub parameter...
CVE-2011-5222
The CVE-2011-5222 entry concerns a SQL injection in rub2_w.php of PHP Flirt-Projekt 4.8 (and possibly earlier). The vulnerability is triggered via the rub parameter, allowing remote attackers to execute arbitrary SQL commands. The linked NVD entry lists a base score of 7.5 (HIGH) with network att...
CVE-2011-5222
SQL injection vulnerability in rub2w.php in PHP Flirt-Projekt 4.8 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the rub parameter...
Hardcoded credentials
The HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not disable JavaScript, Java, and Plugins, which allows remote attackers to inject arbitrary web script or HTML via a crafted email...
amanda <=4.8 check_sql.asp SQL注入漏洞
No description provided by source...
cmseasy <=4.8_lib-tool-front_class.php 远程密码修改漏洞
No description provided by source...
ecshop 4 8 leak site path vulnerability-vulnerability warning-the black bar safety net
http:// 网站 /shop/api/cron.php http:// 网站 /shop/wap/goods.php http:// 网站 /shop/temp/compiled/urhere.lbi.php http:// 网站 /shop/temp/compiled/pages.lbi.php http:// 网站 /shop/temp/compiled/usertransaction.dwt.php http:// 网站 /shop/temp/compiled/history.lbi.php http:// 网站...
BackBox Linux 2 released
BackBox Linux 2 released The BackBox team is proud to announce the release of BackBox. Linux 2.BackBox 2 features the following upstream components: Ubuntu 11.04, Linux Kernel 2.6.38 and Xfce 4.8. BackBox is an Ubuntu-based distribution developed to perform penetration tests and security...
CVE-2011-0419
Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...
openQRM 4.8 - source_tab Cross-Site Scripting
openQRM 4.8 - sourcetab Cross-Site Scripting source: https://www.securityfocus.com/bid/47865/info openQRM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...
openQRM 4.8 Cross Site Scripting
------------------------------------------------------------------------ Software................openQRM 4.8 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.openqrm.com/ Discovery Date..........5/14/2011 Tested...
Joomla G2Bridge Local File Inclusion
Exploit Title: Joomla Component comg2bridge LFI vulnerability Date: May 30th, 2010 Author: akatsuchi Explore Crew [email protected] Software Link: http://www.flashyourweb.com/staticpages/index.php?page=g2bridgereadme Platform / Tested on: CentOS release 4.8 Final category: webaps...
Joomla Component com_g2bridge LFI vulnerability
Exploit for php platform in category web applications =============================================== Joomla Component comg2bridge LFI vulnerability =============================================== Author: akatsuchi Explore Crew email protected Software Link:...
CVE-2009-4809
Affects Easy File Sharing (EFS) Web Server 4.8. The vulnerability is a directory traversal in thumbnail.ghp where an attacker can read arbitrary files by manipulating the vfolder parameter (dot-dot sequence). This is a file-read impact, enabling access to portions of the server’s filesystem. The ...
Smart PC Recorder .MP3 Local Crash POC
Exploit for windows platform in category dos / poc ========================================== Smart PC Recorder 4.8 .MP3 Local Crash POC ========================================== Exploit Title: Smart PC Recorder .MP3 Local Crash POC Date: March 23, 2010 Author: chap0 Software Link:...
Smart PC Recorder 4.8 - .mp3 Local Crash (PoC)
Smart PC Recorder 4.8 - .mp3 Local Crash PoC Exploit Title: Smart PC Recorder .MP3 Local Crash POC Date: March 23, 2010 Author: chap0 Software Link: http://www.voiceemotion.com/smartrecorder.htm Version: Current Version: 4.8 Tested on: Windows XP SP3/Windows 7 Cost USD 19.95 !/usr/bin/perl Glory ...
Smart PC Recorder 4.8 - '.mp3' Local Crash (PoC)
Exploit Title: Smart PC Recorder .MP3 Local Crash POC Date: March 23, 2010 Author: chap0 Software Link: http://www.voiceemotion.com/smartrecorder.htm Version: Current Version: 4.8 Tested on: Windows XP SP3/Windows 7 Cost USD 19.95 !/usr/bin/perl Glory to God Won't Bow to Men, I Defy! print "| Sma...
CVE-2010-0705
Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d60030, which allows local users to cause a denial of service system crash or execute arbitrary code to gain privileges via IOCTL requests using...