81 matches found
BELL-CVE-2011-4087 CVE-2011-4087 does not affect BellSoft software
Bulletin has no description...
CVE-2011-4087
CVE-2011-4087 affects the Linux kernel up to version 2.6.38, where the function br_parse_ip_options in net/bridge/br_netfilter.c fails to initialize a data structure properly. This can allow remote attackers to cause a denial of service by manipulating connectivity to an Ethernet bridge-enabled n...
SuSE Update for kernel openSUSE-SU-2012:0236-1 (kernel)
Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse201202361.nasl 8295 2018-01-05 06:29:18Z teissa $ SuSE Update for kernel openSUSE-SU-2012:0236-1 kernel Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...
kernel: security and bugfix update. (important)
The openSUSE 11.4 kernel was updated to fix bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used. CVE-2011-269...
Ubuntu: Security Advisory (USN-1304-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-1294-1: Linux kernel (Oneiric backport) vulnerabilities
Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. CVE-2011-1162 Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit...
Ubuntu: Security Advisory (USN-1193-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-4087
Dear List, I'm writing on behalf of the Check Point Vulnerability Discovery Team to publish the following vulnerability. Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Memory corruption when Adobe Shockwave Player parses .dir media file mma...
CVE-2010-4087
IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a .dir file with a crafted mmap record containing an invalid length of a VSWV entry, a different vulnerability than CVE-2010-4089...
CVE-2010-4087
Adobe Shockwave Player (IML32.dll) is affected by CVE-2010-4087: memory corruption via a crafted .dir mmap record with an invalid VSWV entry length, leading to possible arbitrary code execution or denial of service. This vulnerability is described as existing in Shockwave Player before version 11...
Shockwave Player < 11.5.9.615
The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.615. Such versions are potentially affected by the following issues : - A memory corruption issue exists that could lead to code execution. Note that there are reports this issue is being exploited ...
CVE-2009-4087
Cross-site scripting XSS vulnerability in index.php in telepark.wiki 2.4.23 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2009-4087
Cross-site scripting XSS vulnerability in index.php in telepark.wiki 2.4.23 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2009-4087
The CVE-2009-4087 issue affects Telepark.wiki, specifically the index.php entry point for version 2.4.23 and earlier. The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via PATH_INFO. The OpenVAS and NVD records corroborate a...
CVE-2008-4087
Stack-based buffer overflow in Acoustica Beatcraft 1.02 Build 19 allows user-assisted attackers to cause a denial of service or execute arbitrary code via a Beatcraft Project aka bcproj file with a long string in a certain instruments title field...
CVE-2008-4087
Affected product: Acoustica Beatcraft 1.02 Build 19. The CVE describes a stack-based buffer overflow in a Beatcraft Project file (bcproj) where a long string in an instrument title field can be processed by Beatcraft, enabling user-assisted attackers to trigger a denial of service or arbitrary co...
CVE-2008-4087
creationtimestamp| type| source ---|---|--- 2008-08-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6333...
CVE-2007-4087
CVE-2007-4087 affects AlstraSoft Video Share Enterprise. Affected component: the web application handling category and UID inputs. The root cause is improper input handling leading to information disclosure: sending a single quote (') in the category parameter to view_video.php can reveal the ful...
CVE-2006-4087
CVE-2006-4087 describes a cross-site scripting (XSS) vulnerability in the admin.cgi component of mojoGallery (mojoscripts.com). The issue allows remote attackers to inject arbitrary web script or HTML through the username parameter. The NVD records a CVSSv2 base score of 4.3 (medium severity), wi...
SugarCRM <= 4.0 beta Remote File Inclusion Vulnerability
The version of SugarCRM installed on the remote host does not properly sanitize user input in the SPDX-FileCopyrightText: 2005 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...