10068 matches found
Microsoft Internet Explorer 'OnPropertyChange_Src()' Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura...
Microsoft Windows SMB Pool Overflow Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the Microsoft Server Message Block SMB protocol software. A remote attacker can exploit this issue to execute code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service...
Microsoft Windows 'xxxRealDrawMenuItem()' Function Local Denial Of Service Vulnerability
Description Microsoft Windows is prone to a local denial-of-service vulnerability that occurs in the Windows kernel. A local attacker may exploit this issue to cause the affected computer to crash and reboot, resulting in a denial-of-service condition. Technologies Affected Avaya Aura Conferencin...
Microsoft Internet Explorer Event Handler Cross Domain Information Disclosure Vulnerability
Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to access local files or content from a browser window in another domain or security...
Microsoft Internet Explorer "CIframeElement" Use After Free Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura...
Microsoft Windows SChannel Certificate Request Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability that affects SChannel. Successful exploits will allow an attacker to run arbitrary code in the context of the currently logged-in user. Technologies Affected Avaya Aura Conferencing 6.0 Avaya Aura Conferencing 6.0...
Microsoft Internet Explorer 'boundElements' Use-After-Free Error Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura...
Microsoft Windows CVE-2010-1895 User Pool Overflow Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker may exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers...
Microsoft Windows 'xxxCreateWindowEx()' Window Creation Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker may exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers...
Microsoft Windows SMB Stack Exhaustion Denial of Service Vulnerability
Description Microsoft Windows is prone to a denial-of-service vulnerability that affects the Microsoft Server Message Block SMB protocol software. A remote attacker can exploit this issue to stop the affected system from responding, resulting in denial-of-service conditions. Technologies Affected...
EUVD-2010-2976
Stack-based buffer overflow in the IConfigurationAccess interface in the Invensys Wonderware Archestra ConfigurationAccessComponent ActiveX control in Wonderware Application Server WAS before 3.1 SP2 P01, as used in the Wonderware Archestra Integrated Development Environment IDE and the InFusion...
CVE-2010-2974
The CVE-2010-2974 issue is a stack-based buffer overflow in the IConfigurationAccess interface of the Wonderware ArchestrA ConfigurationAccessComponent ActiveX control used by Wonderware Application Server (WAS) and related IDE/IEE. Affected software runs prior to 3.1 SP2 P01. An attacker can sup...
JBoss Seam 2 File Upload and Execute
Versions of the JBoss Seam 2 framework use exploit/multi/http/jboss/seamuploadexec msf undefinedseamuploadexec show actions ...actions... msf undefinedseamuploadexec set ACTION msf undefinedseamuploadexec show options ...show and set options... msf undefinedseamuploadexec run This module requires...
Oracle Critical Patch Update Advisory - July 2010
Oracle Critical Patch Update Advisory - July 2010 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are...
Microsoft Windows Shortcut 'LNK/PIF' Files Automatic File Execution Vulnerability
Description Microsoft Windows is prone to a vulnerability that may allow a file to automatically run because the software fails to properly handle 'LNK' files or 'PIF' files. An attacker may exploit this issue to execute arbitrary code. The attacker must entice a victim to view a specially crafte...
Sun Java System Application Server Local Vulnerability
Sun Java System Application Server is prone to a local vulnerability. The 'GUI' sub component is affected. This vulnerability affects the following supported versions: Sun Java System Application Server 8.0, 8.1, 8.2. OpenVAS Vulnerability Test $Id: gbsunjavasystemapplicationserver41638.nasl 5373...
CVE-2010-2397
Unspecified vulnerability in Oracle Sun Java System Application Server 8.0, 8.1, and 8.2; and GlassFish Enterprise Server 2.1.1; allows local users to affect confidentiality and integrity, related to the GUI...
Design/Logic Flaw
Unspecified vulnerability in Oracle Sun Java System Application Server 8.0, 8.1, and 8.2; and GlassFish Enterprise Server 2.1.1; allows local users to affect confidentiality and integrity, related to the GUI...
Design/Logic Flaw
Unspecified vulnerability in the Application Server Control component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0081...
CVE-2010-2397
The CVE-2010-2397 issue affects Sun Java System Application Server versions 8.0, 8.1, 8.2 and GlassFish Enterprise Server 2.1.1. The connected sources describe a local GUI-related vulnerability that can affect confidentiality and integrity when an attacker has local access. The root cause is not ...