Android 2.3 信息泄露漏洞

CVE-2011-4276 Android是Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android 2.3.6之前的2.3版本中的Bluetooth servicecom/android/phone/BluetoothHeadsetService.java中存在漏洞。远程攻击者可利用该漏洞借助AT电话簿转移，在蓝牙范围内获取联系人数据。 0 Android 2.3 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...

CVE-2011-4276

The CVE-2011-4276 issue affects Android 2.3 before 2.3.6, where the Bluetooth service (com/android/phone/BluetoothHeadsetService.java) allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer. Root cause is a flaw in the Bluetooth service handling AT phon...

CVE-2011-4276

The Bluetooth service com/android/phone/BluetoothHeadsetService.java in Android 2.3 before 2.3.6 allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer...

CVE-2010-4276

Cross-site scripting XSS vulnerability in the lztrackingsetsessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers to inject arbitrary web script or HTML via the livezilla parameter in a track action to server.php...

CVE-2010-4276

CVE-2010-4276 refers to a cross-site scripting vulnerability in LiveZilla 3.2.0.2. The flaw is triggered in the lz_tracking_set_sessid function, within templates/jscript/jstrack.tpl, allowing an attacker to inject arbitrary script or HTML by manipulating the livezilla parameter in a track action ...

LiveZilla Cross Site Scripting

Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ LiveZilla Cross Site Scripting Vulnerability CVE-2010-4276 INTRODUCTION Accordingly to LiveZilla GmbH, "the Next Generation Live Help and Live Support System connects you to your website...

CVE-2010-4276

creationtimestamp| type| source ---|---|--- 2010-12-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35149...

CVE-2007-4276

CVE-2007-4276: A stack-based buffer overflow in IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allows local attackers to execute arbitrary code by sending a long value via the DASPROF environment variable (and possibly others) that is copied into the buildDasPaths buffer. Affected product...

CVE-2006-4276

PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the TNLIBDIR parameter to novalib/class.novaEdit.mysql.php...

CVE-2006-4276

The CVE-2006-4276 entry concerns a PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier. The issue allows remote code execution by supplying a URL to the TNLIB_DIR parameter in novalib/class.novaEdit.mysql.php. Affected software is Tutti Nova (version 1.6 and earlier); the root c...

CVE-2005-4276

Westell Versalink 327W is affected by CVE-2005-4276, where a remote attacker can cause a denial-of-service (device crash) by sending an IP packet with identical source and destination IPs and ports and with the SYN flag set (LanD). The available descriptions indicate the issue’s provenance is unk...