70 matches found
Microsoft Internet Explorer 6.0 ADODB.Stream Object File Installation Weakness
No description provided by source. source: http://www.securityfocus.com/bid/10514/info Microsoft Internet Explorer is prone to a security weakness that may permit malicious HTML documents to create or overwrite files on a victim file system when interpreted from the Local Zone or other Security...
Nomachine NX Web Companion code spoofing
client.zip file is downloaded without signature check...
Novell iPrint Client < 5.78 Multiple Code Execution Vulnerabilities
The version of Novell iPrint Client installed on the remote host is earlier than 5.78. Such versions are reportedly affected by one or more of the following vulnerabilities that can allow for arbitrary code execution : - An unspecified issue exists in the GetDriverSettings realm in nipplib.dll...
Novell iPrint Client < 5.78 Multiple Code Execution Vulnerabilities
Binary data 6315.prm...
CVE-2011-1705
Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted client-file-name parameter in a printer-url...
CVE-2002-0131
CVE-2002-0131 : The ActivePython ActiveX control for Python in the AXScript package, used in Internet Explorer, can be exploited to read arbitrary files from the client’s filesystem via a malicious web page containing Python script. The root cause is that the control does not prevent script from ...
security bug Internet Explorer 5
There is a security bug in the Internet Explorer 5 I haven't tested it on other browsers. It is possible to read some textfiles others than cookies from the client's hard disk. If there is for example in the directory 'C:WINNT' a textfile 'test.txt' with content: us="stefaan" passwd="mypasswd" th...
Проблемы с SCP в OpenSSH
Со стороны сервера можно контролировать размещение файлов на компьютере клиента...
CVE-1999-0179
Publicly available documents provided do not include detailed technical information (affected products/versions, root cause, exploit details) for CVE-1999-0179. Monitor connected sources (Red Hat, CVE, EUVD, NVD) for updates and clarifications.