117 matches found
openSUSE: Security Advisory for ruby (openSUSE-SU-2013:0280-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE Update for ruby openSUSE-SU-2013:0278-1 (ruby)
Check for the Version of ruby OpenVAS Vulnerability Test $Id: gbsuse201302781.nasl 8542 2018-01-26 06:57:28Z teissa $ SuSE Update for ruby openSUSE-SU-2013:0278-1 ruby Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is fre...
ruby on rails to 2.3.16 (important)
This update updates the RubyOnRails 2.3 stack to 2.3.16, also this update updates the RubyOnRails 3.2 stack to 3.2.11. Security and bugfixes were done, foremost: CVE-2013-0333: A JSON sql/code injection problem was fixed. CVE-2012-5664: A SQL Injection Vulnerability in Active Record was fixed...
[SECURITY] [DSA 2597-1] rails security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2597-1 [email protected] http://www.debian.org/security/ Nico Golde January 04, 2013 http://www.debian.org/security/faq -...
Ruby on Rails Authlogic gem SQL注入漏洞
CVE ID: CVE-2012-5664 Ruby on Rails是一款Web应用程序框架，构建在Ruby语言之上 AuthLogic gem实现存在一个SQL注入漏洞，如果Ruby on Rails应用使用AuthLogic gem进行验证，并且攻击者在能访问Rails应用的私钥的情况下，可绕过安全限制进行未授权访问 0 Ruby on Rails 厂商补丁： Ruby on Rails ---------- 目前没有详细解决方案提供： http://rubygems.org/gems/authlogic...
CVE-2012-5664
CVE-2012-5664 is rejected/not used and does not represent an active vulnerability entry.
PT-2012-6068 · Suse · Rubygem-Actionmailer +52
Уязвимость CVE-2012-5664...
Realtek Media Player Playlist - Remote Buffer Overflow (Metasploit)
$Id: realtekplaylist.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Realtek Media Player Playlist Buffer Overflow
This module exploits a stack buffer overflow in Realtek Media PlayerRtlRack A4.06. When a Realtek Media Player client opens a specially crafted playlist, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2008-5664
CVE-2008-5664 affects Realtek Media Player (RtlRack/rtlrack.exe) 1.15.0.0. A stack-based buffer overflow in the handling of crafted playlist (PLA) files allows remote code execution. Public references include CVE coverage and exploit demonstrations (e.g., Metasploit module, BID/OSVDB entries). So...
CVE-2008-5664
Stack-based buffer overflow in Realtek Media Player aka Realtek Sound Manager, RtlRack, or rtlrack.exe 1.15.0.0 allows remote attackers to execute arbitrary code via a crafted playlist PLA file...
CVE-2008-5664
creationtimestamp| type| source ---|---|--- 2008-12-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7492 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16456 2018-05-29 15:50:33+00:00| seen|...
IBM DB2数据库db2dasrrm缓冲区溢出和文件创建漏洞
BUGTRAQ ID: 27870 CVECAN ID: CVE-2007-5758,CVE-2007-5664 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。...
CVE-2007-5664
db2dasrrm in the DB2 Administration Server DAS in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before FixPak 16 allows local users to overwrite arbitrary files via a symlink attack on files used for initialization...
CVE-2006-5664
CVE-2006-5664 describes a local vulnerability in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 where a symlink attack on temporary files could allow local users to compromise security. The report notes a local-access impact an...