20296 matches found
Microsoft Windows OpenType Font Parsing Remote Code Execution (MS12-078; CVE-2012-2556)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to an error in the way the OpenType Font OTF driver handles objects in memory. A remote attacker can exploit this issue by enticing a target user to open a specially crafted web page or email...
MS KB2785605: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10
The remote host is missing KB2785605. It may, therefore, be affected by the following vulnerabilities related to the installed version of the Adobe Flash ActiveX control : - An unspecified error exists that could allow a buffer overflow and arbitrary code execution. CVE-2012-5676 - An unspecified...
MS12-079: Vulnerability in Microsoft Word Could Allow Remote Code Execution (2780642)
The version of Office, Office Compatibility Pack, Microsoft Word Viewer, Microsoft Office Web Apps, and/or Microsoft Share Point Server installed on the remote host has a remote code execution vulnerability. This is due to the way that Microsoft Office software parses RTF data and could allow an...
Fedora Update for openstack-keystone FEDORA-2012-19341
Check for the Version of openstack-keystone OpenVAS Vulnerability Test Fedora Update for openstack-keystone FEDORA-2012-19341 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
Flash Player <= 10.3.183.29 / 11.4.402.287 Multiple Vulnerabilities (APSB12-24)
Binary data 6655.prm...
Microsoft Word RTF listoverridecount Remote Code Execution (MS12-079; CVE-2012-2539; CVE-2014-1761)
A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is due to an error in the way Word parses specially crafted Rich Text Format RTF data. A remote attacker can exploit this issue by enticing a target user to open a malicious Microsoft Office Document...
Microsoft DirectPlay CLSID_DirectPlay8Peer (MS12-082; CVE-2012-1537)
A remote code execution vulnerability has been reported in the DirectPlay component of the DirectX library on Windows...
Microsoft DirectPlay CLSID_DirectPlay8Address (MS12-082; CVE-2012-1537)
A remote code execution vulnerability has been reported in the DirectPlay component of the DirectX library on Windows...
Security fix for the ALT Linux 7 package bind version 9.9.2-alt3
Dec. 11, 2012 George V. Kouryachy 9.9.2-alt3 - Update to 9.9.2-P1 CVE-2012-5688 and bugfixes - Add systemd service file from FC...
Microsoft Windows TrueType Font Parsing Remote Code Execution (MS12-078; CVE-2012-4786)
A remote code execution vulnerability has been reported in Microsoft Windows...
Microsoft Windows Filename Parsing Remote Code Execution (MS12-081; CVE-2012-4774)
A remote code execution vulnerability has been reported in Microsoft Windows...
Internet Explorer Improper Ref Counting Use After Free (MS12-077; CVE-2012-4787)
A remote code execution vulnerability has been reported in Internet Explorer...
CentOS 6 : mysql (CESA-2012:1551)
Updated mysql packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Oracle MySQL/MariaDB 不安全Salt生成安全绕过漏洞(CVE-2012-5627)
Bugtraq ID:56837 CVE ID:CVE-2012-5627 MySQL是一款开源关系型数据库管理系统。MariaDB是一个采用Maria存储引擎的MySQL分支版本。 MySQL处理密码salt值存在漏洞，当用户登录MySQL时，会生成Salt值用于防止密码猜测攻击。此salt值在会话开始时创建并用于整个会话，如果通过验证的攻击者使用MySQL "changeuser"命令尝试以其他用户登录，由于Salt已知，可导致密码猜测更有效率。 0 MySQL 5.5.19及其他版本 MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66 MariaDB...
Smartphone Pentest Framework 0.1.3 / 0.1.4 Command Injection
Advisory ID: HTB23127 Product: Smartphone Pentest Framework SPF Vendor: Bulb Security LLC Vulnerable Versions: 0.1.3, 0.1.4 and probably prior Tested Versions: 0.1.3, 0.1.4 Vendor Notification: November 19, 2012 Public Disclosure: December 10, 2012 Vulnerability Type: OS Command Injection CWE-78...
Multiple Command Execution Vulnerabilities in Smartphone Pentest Framework
Advisory ID: HTB23127 Product: Smartphone Pentest Framework SPF Vendor: Bulb Security LLC Vulnerable Versions: 0.1.3, 0.1.4 and probably prior Tested Versions: 0.1.3, 0.1.4 Vendor Notification: November 19, 2012 Public Disclosure: December 10, 2012 Vulnerability Type: OS Command Injection CWE-78...
Microsoft DirectPlay CLSID_DP8SP_SERIAL (MS12-082; CVE-2012-1537)
A remote code execution vulnerability has been reported in the DirectPlay component of the DirectX library on Windows...
Fedora 18 : cups-pk-helper-0.2.4-1.fc18 (2012-17907)
Update to cups-pk-helper-0.2.4. Fixes CVE-2012-4510. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora Update for cups-pk-helper FEDORA-2012-18950
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
SimpleInvoices 2011.1 Cross-Site-Scripting (XSS) Vulnerabilities CVE-2012-4932
Overview SimpleInvoices 2011.1 is vulnerable to Cross-site Scripting XSS. Software Description Simple Invoices is a free, open source, web based invoicing system that you can install on your server/pc or have hosted by one of our services providers. Vulnerability Overview The vulnerabilities POC...