USN-2633-1: Linux kernel (Trusty HWE) vulnerabilities

Wen Xu discovered a use-after-free flaw in the Linux kernel's ipv4 ping support. A local user could exploit this flaw to cause a denial of service system crash or gain administrative privileges on the system. CVE-2015-3636 A memory corruption flaw was discovered in the Linux kernel's scsi...

Updated kernel-tmb packages fix security vulnerabilities and bugs

Updated kernel-tmb fixes security, critical data corruption and pdata loss issues This kernel-tmb update is based on upstream -longterm 3.14.43 and fixes a security issue, and critical data corruption and data loss issues: drivers/vhost/scsi.c: potential memory corruption CVE-2015-4036 ext4...

Updated kernel-linus packages fix security vulnerabilities and bugs

Updated kernel-linus fixes security, critical data corruption and pdata loss issues This kernel-linus update is based on upstream -longterm 3.14.43 and fixes a security issue, and critical data corruption and data loss issues: drivers/vhost/scsi.c: potential memory corruption CVE-2015-4036 ext4...

UBUNTU-CVE-2015-4036

Array index error in the tcmvhostmaketpg function in drivers/vhost/scsi.c in the Linux kernel before 4.0 might allow guest OS users to cause a denial of service memory corruption or possibly have unspecified other impact via a crafted VHOSTSCSISETENDPOINT ioctl call. NOTE: the affected function w...

Ubuntu: Security Advisory (USN-2564-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-2565-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-4036

CVE-2014-4036 is an XSS vulnerability affecting ImpressCMS 1.3.6.1, specifically in modules/system/admin.php where a listimg action’s query parameter can inject arbitrary script/HTML. The vulnerability is confirmed across multiple connected records (Red Hat, NVD, GHSA, osv, CVE record). No concre...

CVE-2013-4036

CVE-2013-4036 affects IBM InfoSphere Master Data Management products: InfoSphere Master Data Management Server for Product Information Management (PIM) versions 9.0/9.1 and Collaborative Edition (MDMCS) versions 10.0/10.1/11.0. The vulnerability is an XSS due to improper validation of user-suppli...

Oracle Linux 5 : kernel (ELSA-2010-0046)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0046 advisory. - firewire ohci: handle receive packets with zero data Jay Fenlason 547241 547242 CVE-2009-4138 - fs respect flag in docoredump Danny Feng 544188 54418...

CVE-2012-4036

Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the addons directory. NOTE: this vulnerability can be leveraged b...

CVE-2012-4036

PBBoard 2.1.4 is affected by an unrestricted file upload in admin.php that lets remote admins upload a file with an executable extension to the addons directory and access it directly, potentially executing arbitrary PHP code. This vulnerability is tied to CVE-2012-4036 and can be leveraged via C...

Multiple vulnerabilities in PBBoard

Advisory ID: HTB23101 Product: PBBoard Vendor: www.pbboard.com Vulnerable Versions: 2.1.4 and probably prior Tested Version: 2.1.4 Vendor Notification: July 18, 2012 Public Disclosure: August 8, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Improper Access Contro...

PBBoard 2.1.4 SQL Injection / Improper Authentication / Broken Access Control

Exploit for php platform in category web applications Vendor: www.pbboard.com Vulnerable Versions: 2.1.4 and probably prior Tested Version: 2.1.4 Vendor Notification: July 18, 2012 Public Disclosure: August 8, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Imprope...

PBBoard 2.1.4 SQL Injection / Improper Authentication / Broken Access Control

Advisory ID: HTB23101 Product: PBBoard Vendor: www.pbboard.com Vulnerable Versions: 2.1.4 and probably prior Tested Version: 2.1.4 Vendor Notification: July 18, 2012 Public Disclosure: August 8, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Improper Access Contro...

CVE-2012-4036

creationtimestamp| type| source ---|---|--- 2012-08-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37616...

CVE-2011-4036

CVE-2011-4036 is a directory traversal vulnerability in the Schneider Electric Vijeo Historian/Web Portal family: Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADA Reports 4.10 and earlier. The flaw in the web portal could allow remote attackers to read arbitrary...

Google Chrome multiple vulnerabilities - October 10(Windows)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnoct10win.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - October 10Windows Authors: Madhuri D Copyright: Copyright c 2010 Greenbone...

CVE-2010-4036

Google Chrome before 7.0.517.41 does not properly handle the unloading of a page, which allows remote attackers to spoof URLs via unspecified vectors...

CVE-2010-4036

CVE-2010-4036 affects Google Chrome prior to 7.0.517.41. The vulnerability arises from how the browser handles unloading a page, allowing remote attackers to spoof URLs via unspecified vectors. Some sources (NVD/OpenVAS references) show a network-based vector with partial confidentiality/integrit...

Microsoft Windows VAD本地权限提升漏洞（MS08-064）

BUGTRAQ ID: 31675 CVECAN ID: CVE-2008-4036 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的内存管理器处理内存分配和虚拟地址描述符（VAD）的方式中存在一个整数溢出漏洞。如果通过认证的攻击者在受影响的系统上运行特制的程序，此漏洞可能允许权限提升。成功利用此漏洞的攻击者可以在受影响的系统上获得特权提升。攻击者随后可安装程序；查看、更改或删除数据；或者创建拥有完全管理权限的新帐户。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows...