122 matches found
Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)
According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...
Apple iTunes < 11.1.4 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes on the remote host is prior to version 11.1.4. It is, therefore, affected by multiple vulnerabilities : - The included versions of the WebKit, libxml, and libxslt components in iTunes contain several errors that can lead to memory corruption and arbitrary code executio...
Apple iTunes < 11.1.4 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is older than 11.1.4. It is, therefore, potentially affected by several issues : - The included versions of WebKit, libxml, and libxslt contain several errors that could lead to memory corruption and possibly arbitrary code executio...
CVE-2013-5125
CVE-2013-5125 is listed among Apple iTunes WebKit-related vulnerabilities. Nessus/OpenVAS entries indicate it is part of memory corruption flaws in WebKit (and related components) used by iTunes on Windows, potentially enabling arbitrary code execution via memory corruption when browsing the iTun...
AbanteCart 1.1.3 Cross Site Scripting
AbanteCart 1.1.3 index.php Multiple Reflected XSS Vulnerabilities Vendor: Belavier Commerce Product web page: http://www.abantecart.com Affected version: 1.1.3 Summary: AbanteCart is a free PHP based eCommerce solution for merchants to provide ability creating online business and sell products...
Google Chrome < 23.0.1271.64 Multiple Vulnerabilities
Binary data 800919.prm...
Google Chrome Multiple Vulnerabilities - Nov2012 (Linux)
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov12lin.nasl 5999 2017-04-21 09:02:32Z teissa $ Google Chrome Multiple Vulnerabilities - Nov2012 Linux Authors: Antu Sanadi Copyright: Copyright c 2012...
Google Chrome Multiple Vulnerabilities - Nov2012 (Windows)
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov12win.nasl 5931 2017-04-11 09:02:04Z teissa $ Google Chrome Multiple Vulnerabilities - Nov2012 Windows Authors: Antu Sanadi Copyright: Copyright c 2012...
Google Chrome Multiple Vulnerabilities - Nov2012 (Mac OS X)
This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov12macosx.nasl 5999 2017-04-21 09:02:32Z teissa $ Google Chrome Multiple Vulnerabilities - Nov2012 Mac OS X Authors: Antu Sanadi Copyright: Copyright c 2012...
FreeBSD : chromium -- multiple vulnerabilities (209c068d-28be-11e2-9160-00262d5ed8ee)
Google Chrome Releases reports : 157079 Medium CVE-2012-5127: Integer overflow leading to out-of-bounds read in WebP handling. Credit to Phil Turnbull. Linux 64-bit only 150729 Medium CVE-2012-5120: Out-of-bounds array access in v8. Credit to Atte Kettunen of OUSPG. 143761 High CVE-2012-5116:...
CVE-2012-5125
CVE-2012-5125 affects Google Chrome/Chromium prior to 23.0.1271.64, via a use-after-free in handling of extension tabs. The OpenVAS/GLSA entries enumerate this CVE among a suite of Chromium/V8 issues with base CVSS 7.5 (HIGH) and a network attack vector with no user interaction required. The core...
CVE-2011-5125
Cross-site scripting XSS vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving the HTTP TRACE method...
CVE-2011-5125
Cross-site scripting XSS vulnerability in Blue Coat Director before 5.5.2.3 allows remote attackers to inject arbitrary web script or HTML via vectors involving the HTTP TRACE method...
CVE-2011-5125
CVE-2011-5125 is a Cross-site Scripting (XSS) vulnerability in Blue Coat Director prior to version 5.5.2.3. The issue allows remote attackers to inject arbitrary web script or HTML via vectors involving the HTTP TRACE method. The NVD entry lists a medium base score (4.3, CVSS2) with Network attac...
CVE-2009-5125
CVE-2009-5125 affects Comodo Internet Security prior to 3.9.95478.509. The vulnerability allows remote attackers to bypass malware detection by manipulating the RAR archive file format, enabling evasion of scanning. The underlying root cause is described as an unspecified manipulation of the arch...
CVE-2008-5125
CCleague Pro 1.2 is affected; admin.php allows remote authentication bypass by setting the type cookie value to admin. Root cause: insufficient validation of the type cookie enabling access to privileged state. Impact per sources is partial confidentiality, integrity, and availability concerns du...
CVE-2008-5125
creationtimestamp| type| source ---|---|--- 2008-06-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5888...
Sql injection
SQL injection vulnerability in the isgod function in includes/nukesentinel.php in NukeSentinel 2.5.11 allows remote attackers to execute arbitrary SQL commands via base64-encoded data in an admin cookie, a different vector than CVE-2007-5125...