86 matches found
Microsoft Unicode Scripts Processor Arbitrary Code Execution Exploit
On the 8th December 2015, Microsoft released Security Bulletin MS15-130 to fix a vulnerability in Unicode Scripts Processor component found by Secunia Research. The vector for a successful exploitation is a specially crafted "True Type Font" TTF file, which typically can be embedded in e.g...
CVE-2015-6130
CVE-2015-6130 is a Windows Uniscribe (USP10.DLL) vulnerability affecting Windows 7 SP1 and Windows Server 2008 R2 SP1. A specially crafted True Type Font (TTF) embedded in documents or web content can trigger an integer underflow in Uniscribe, allowing remote code execution. Microsoft issued MS15...
Microsoft Windows Uniscribe Integer Underflow (MS15-130: CVE-2015-6130)
An integer underflow vulnerability exists in Microsoft Windows Uniscribe. The vulnerability is due to an improper alignment of table offsets leading to an integer underflow. A remote attacker can exploit this vulnerability by enticing the target to open a specially crafted ttf file. Successful...
MS15-130: Security Update for Microsoft Uniscribe to Address Remote Code Execution (3108670)
The remote Windows host is affected by a remote code execution vulnerability due to improper parsing of fonts by Uniscribe. A remote attacker can exploit this vulnerability by convincing a user to open a specially crafted document or visit an untrusted website that contains specially crafted...
[SECURITY] [DLA 298-1] roundup security update
Package : roundup Version : 1.4.15-3+deb6u1 CVE ID : CVE-2012-6130 CVE-2012-6131 CVE-2012-6132 CVE-2012-6133 CVE-2012-6130 Cross-site scripting XSS vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related ...
CVE-2014-6130
The CVE-2014-6130 issue affects IBM Notes Traveler for Android prior to version 9.0.1.3. The application does not warn users when selecting an HTTP session, enabling an attacker who can observe network traffic to obtain sensitive information (credentials) intended to be transmitted over HTTPS. Ro...
CVE-2012-6130
Cross-site scripting XSS vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link...
CVE-2012-6130
The CVE-2012-6130 entry describes a Cross-site Scripting (XSS) in Roundup’s history display prior to version 1.4.20, allowing remote attackers to inject arbitrary web script or HTML via a username argument. Connected documents corroborate that Roundup up to 1.4.20 is affected (e.g., Debian DLA-29...
CVE-2012-6130
Cross-site scripting XSS vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link...
CVE-2005-4885
Unspecified vulnerability on certain Sun StorEdge 6130 SE6130 Controller Arrays allows remote attackers to delete data via unknown vectors...
CVE-2005-4885
Technical details of CVE-2005-4885 are not provided in the supplied documents; no concrete exploit/vector/affected products are specified here. Monitor for updates.
CVE-2005-4885
Unspecified vulnerability on certain Sun StorEdge 6130 SE6130 Controller Arrays allows remote attackers to delete data via unknown vectors...
CVE-2008-6130
The CVE-2008-6130 entry identifies a cross-site scripting (XSS) vulnerability in moziloWiki 1.0.1 and earlier, exploitable via index.php. The root cause is unsanitized input in the (1) action and (2) page parameters, enabling remote attackers to inject arbitrary web script or HTML. Affected softw...
CVE-2008-4194
creationtimestamp| type| source ---|---|--- 2008-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6122 2008-07-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6123 2008-07-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6130...
openSUSE 10 Security Update : gnump3d (gnump3d-4774)
This update fixes a restriction bypass in gnump3d's plugins. CVE-2007-6130 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnump3d-4774. The text description of this plugin is C SUSE LLC...
CVE-2007-6130
The CVE-2007-6130 issue affects gnump3d 2.9final, where password protection is not applied to plugins, potentially allowing remote attackers to bypass intended access restrictions. The vulnerability concerns plugin-level access controls rather than core authentication, with the NVD and SUSE entri...
CVE-2006-6130
Apple Mac OS X AppleTalk allows local users to cause a denial of service kernel panic by calling the AIOCREGLOCALZN ioctl command with a crafted data structure on an AppleTalk socket...
CVE-2006-6130
CVE-2006-6130 affects Apple Mac OS X AppleTalk. A local user can trigger a kernel panic by invoking the AIOCREGLOCALZN ioctl with a crafted data structure on an AppleTalk socket. The underlying cause, as stated in public records, is manipulation of the AppleTalk ioctl path leading to a denial of ...