KLA10665 Obtain sensitive information vulnerability in VMware vCenter Server

Improper certificate validation was found in VMware vCenter Server. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a traffic interception. Technical details This vulnerability can be exploited when vCenter Server...

VMware vCenter Server updates address a LDAP certificate validation issue

VMware vCenter Server LDAP certificate validation vulnerability. VMware vCenter Server does not validate the certificate when connecting to a single sign on identity source using LDAPS LDAP over SSL. This applies when connecting to Active Directory as an LDAP Server or OpenLDAP. Exploitation of...

VMSA-2015-0006:VMware vCenter Server updates address a LDAP certificate validation issue

VMSA-2015-0006.1 VMware vCenter Server updates address a LDAP certificate validation issue VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2015-0006.1 VMware Security AdvisorySynopsis: VMware vCenter Server updates address a LDAP certificate validation issue VMware Security...

CVE-2014-6932

CVE-2014-6932 affects the Android All Navalny app (1.10). The vulnerability is due to the app not verifying X.509 certificates in SSL/TLS, allowing MITM attackers to spoof servers and exfiltrate sensitive information via crafted certificates. Root cause: missing server cert verification during SS...

IrfanView远程缓冲区溢出漏洞

BUGTRAQ ID: 64561 CVECAN ID: CVE-2013-6932 IrfanView是一款快速、免费的图像查看器、浏览器、转换器。FORMATS插件可允许IrfanView读取不常见图形格式。 IrfanView 4.36及其他版本在实现上存在缓冲区溢出漏洞，使用了多字节的目录名称后，远程攻击者通过缩略图窗口内的缩略图提示信息功能所处理过的特制文件，利用此漏洞可执行任意代码。 0 IrfanView IrfanView 4.37 厂商补丁： IrfanView --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2013-6932

Buffer overflow in IrfanView before 4.37, when a multibyte-character directory name is used, allows user-assisted remote attackers to execute arbitrary code via a crafted file that is incorrectly handled by the Thumbnail tooltips feature in the Thumbnails window...

CVE-2013-6932

CVE-2013-6932 affects IrfanView up to version 4.37. A buffer overflow occurs when handling a crafted file in the Thumbnails window’s Tooltip feature with a folder name containing multibyte characters, enabling user-assisted remote code execution. Multiple sources (NVD/NJVM/JVN/JVNDB, Nessus/Tenab...

KLA10229 ACE vulnerabilities in IrfanView

A buffer overflow was found in IrfanView. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed GIF file or a specially designed thumbnail in the file. Original advisories IrfanView changelog Related...

Squid 3.2.x < 3.2.13 / 3.3.x < 3.3.8 Port Handling DoS

Binary data 6932.prm...

CVE-2008-6932

CVE-2008-6932 corresponds to an unrestricted file upload vulnerability in AlstraSoft SendIt Pro (submit_file.php). The underlying issue allows remote attackers to upload a file with an executable extension and then access it directly under send/files/, enabling arbitrary code execution. The NVD r...

CVE-2008-6932

creationtimestamp| type| source ---|---|--- 2008-11-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7101...

CVE-2006-6932

CVE-2006-6932: The description indicates multiple SQL injection vulnerabilities in Image Gallery with Access Database. An attacker can remotely execute arbitrary SQL commands by supplying crafted input to (1) id in dispimage.asp, or (2) order or (3) page in default.asp. No vendor/product version ...