81 matches found
Puppet Enterprise 3.3.0 Bundled Oracle Java Vulnerabilities
According to its self-reported version number, the Puppet Enterprise application installed on the remote host is version 3.3.0. Therefore, it contains a bundled version of Oracle Java that is affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Oracle Java SE JRE Multiple Unspecified Vulnerabilities-02 (Jul 2014) - Windows
Oracle Java SE JRE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 2987-1 (openjdk-7 - security update)
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service. OpenVAS Vulnerability Test $Id: deb2987.nasl 6663 2017-07-11 09:58:05Z...
CVE-2014-4264
CVE-2014-4264 is listed as an Oracle Java SE vulnerability affecting Java JRE/JDK (7u60 and 8u5 per the description). Connected documents identify this CVE among OpenSUSE/SUSE and Gentoo GLSA entries, which advise upgrading Oracle JRE/JDK to newer releases (e.g., Gentoo GLSA 201502-12 recommends ...
CVE-2014-4264
Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect availability via unknown vectors related to Security...
Better WP Security Plugin for WordPress Multiple XSS
The WordPress Better WP Security Plugin installed on the remote host is affected by multiple cross-site scripting XSS vulnerabilities : - The application fails to properly sanitize user-supplied input to the HTTPUSERAGENT header. CVE-2012-4263 - The application fails to properly sanitize...
Microsoft Excel File OBJ Record Memory Corruption (MS08-074) - Ver2 (CVE-2008-4264)
Microsoft Excel is a popular spreadsheet application. . A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to an error in Microsoft Excel as a result of pointer corruption when loading Excel formulas. An attacker can exploit this flaw to...
CVE-2013-4264
CVE-2013-4264 affects FFmpeg prior to 2.0.1. The kempf_decode_tile function in libavcodec/g2meet.c mishandles G2M4-encoded files, enabling a remote attacker to trigger a denial of service via an out-of-bounds heap write. The available connected sources confirm the vulnerability and its impact; th...
CVE-2012-4264
Multiple cross-site scripting XSS vulnerabilities in the Better WP Security betterwpsecurity plugin before 3.2.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "server variables," a different vulnerability than CVE-2012-4263...
CVE-2012-4264
The CVE-2012-4264 entry applies to the WordPress plugin Better WP Security (better_wp_security) prior to version 3.2.5. The vulnerability arises from improper sanitization of data in server variables (and related vectors), allowing remote attackers to inject arbitrary web script or HTML (XSS). Af...
CVE-2011-4264
CVE-2011-4264 affects Etomite CMS versions prior to 1.1 with a cross-site scripting (XSS) vulnerability. An attacker can inject arbitrary web script or HTML via unspecified vectors, potentially leading to script execution in the affected user’s browser. Remediation per connected documents is to u...
CVE-2011-4264
Cross-site scripting XSS vulnerability in Etomite before 1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
MS08-072 / MS08-074: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (957173 / 959070) (Mac OS X)
The remote Mac OS X host is running a version of Microsoft Office that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel or Word file, these issues could be leveraged to execute arbitrary code subject to the user's...
CVE-2009-4264
PHP remote file inclusion vulnerability in components/core/connect.php in AROUNDMe 1.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the languagepath parameter...
CVE-2009-4264
creationtimestamp| type| source ---|---|--- 2009-12-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10329...
Microsoft Excel畸形对象解析远程代码执行漏洞（MS08-074）
BUGTRAQ ID: 32618,32622,32621 CVECAN ID: CVE-2008-4265,CVE-2008-4266,CVE-2008-4264 Excel是微软Office套件中的电子表格工具。 Excel在解析记录和公式时存在多个内存破坏漏洞，在验证NAME记录中的索引值时存在栈破坏漏洞。如果用户打开带有畸形对象的特制Excel文件，这些漏洞可能允许远程执行代码。成功利用此漏洞的攻击者可以完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。 Microsoft Excel Viewer 2003 SP3...
MS08-074: Microsoft Excel Multiple Method Remote Code Execution (959070)
The remote host is running a version of Microsoft Excel that is subject to various flaws that may allow arbitrary code to be run. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it...
Microsoft Excel File OBJ Record Memory Corruption (MS08-074; CVE-2008-4264)
Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in the Microsoft Excel. The vulnerability is due to an error in Microsoft Excel as a result of pointer corruption when loading Excel formulas. An attacker can exploit this flaw to execu...
CVE-2006-4264
CVE-2006-4264 describes multiple PHP remote file inclusion vulnerabilities in the Mambo component com_lmtg_myhomepage. The affected software is Mambo with the lmtg_myhomepage (com_lmtg_myhomepage) component; vulnerable files include install.lmtg_homepage.php and mtg_homepage.php, where an attacke...
