vdsm: privilege escalation to root via systemd_run

A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemdrun function exposed to the vdsm system user could be abused to execute arbitrary commands as root...

Lotus Notes RIM connector for Blackberry Desktop Manager ActiveX Denial of Service - Ver2 (CVE-2009-3038)

A denial-of-service vulnerability has been reported in Ibm Lotus Notes Connector. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

Debian Security Advisory DSA 2205-1 (gdm3)

The remote host is missing an update to gdm3 announced via advisory DSA 2205-1. OpenVAS Vulnerability Test $Id: deb22051.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2205-1 gdm3 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

BlackBerry Enterprise Server Web Desktop Manager XSS (KB26296)

The version of BlackBerry Enterprise Server on the remote host reportedly contains a cross-site scripting vulnerability in its Web Desktop Manager component. An attacker may be able to leverage this issue to execute arbitrary script code in the browser of an authenticated user in the context of t...

CVE-2011-0286

CVE-2011-0286 is an XSS vulnerability in the BlackBerry Web Desktop Manager component of BlackBerry BES/BES Express (versions before 5.0.2 MR5, 5.0.3 before MR1, and 5.0.1–5.0.2 for BES Express). The issue arises from the displayErrorMessage parameter in the ManageDevices action, allowing remote ...

GNOME Desktop Manager privilege escalation

root privileges are not dropped on files access...

[SECURITY] [DSA 2205-1] gdm3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2205-1 [email protected] http://www.debian.org/security/ Florian Weimer March 28, 2011 http://www.debian.org/security/faq -...

vdsm: SSL accept() blocks on a non-blocking Connection

Virtual Desktop Server Manager VDSM in Red Hat Enterprise Virtualization RHEV 2.2 does not properly accept TCP connections for SSL sessions, which allows remote attackers to cause a denial of service daemon outage via crafted SSL traffic...

CVE-2010-1143

CVE-2010-1143 describes a Cross-Site Scripting vulnerability in VMware View (Portal) 3.1.x prior to 3.1.3 build 252693, allowing injection of arbitrary HTML/script via unspecified vectors. Connected documents indicate affected product scope includes VMware View Portal (3.1), with the DSecRG advis...

BlackBerry桌面管理器ActiveX控件远程代码执行漏洞

Bugraq ID: 36903 CVE ID：CVE-2009-0306 BlackBerry Desktop Manager是一款用于管理黑莓智能手机的桌面管理器。 BlackBerry桌面管理器默认包含使用的Lotus Notes Intellisync DLL存在安全问题，远程攻击者可以利用漏洞以登录用户进程权限执行任意指令。 攻击者可以诱使用户点击恶意WEB站点链接如嵌入在EMAIL消息，浏览器或即使消息中触发此漏洞。 Research In Motion Blackberry Desktop Manager 4.2.2 + Macrovision FLEXnet Connec...

CVE-2009-0306

Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion RIM BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained...

Buffer overflow

Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion RIM BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained...

CVE-2009-0306

CVE-2009-0306 describes a buffer overflow in the Lotus Notes Intellisync ActiveX control (lnresobject.dll) bundled with BlackBerry Desktop Manager/BlackBerry Desktop Software prior to 5.0.1, enabling remote code execution when a user visits a crafted web page. Affected product range includes Blac...

BlackBerry Desktop Manager Intellisync ActiveX Control Arbitrary Remote Code Execution

The version of the Lotus Notes Intellisync component 'lnsresobject.dll' included with the BlackBerry Desktop Software installation on the remote host reportedly contains an unspecified error that can be exploited to execute arbitrary code. If an attacker can trick a user on the affected host into...

CVE-2009-0306: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion RIM BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained...

Code injection

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

CVE-2009-3038

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

CVE-2009-3038: Undefined Security Weakness

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

KLA10090 RCE vulnerability in BlackBerry Desktop Manager

A buffer overflow was found in BlackBerry Desktop Software. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at a point related to Lotus Notes Intellisync via a specially designed web page. Original advisories BlackBerry...

Fedora Update for xfdesktop FEDORA-2007-4385

Check for the Version of xfdesktop OpenVAS Vulnerability Test Fedora Update for xfdesktop FEDORA-2007-4385 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...