2144 matches found
Design/Logic Flaw
Untrusted search path vulnerability in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a...
April Patch Tuesday Fixes 11 Vulnerabilities, Last Updates for XP
As expected, Microsoft issued its final epitaph for Windows XP today, pushing out four security bulletins for 11 vulnerabilities, including the last updates for the oft-maligned, thirteen-year-old operating system. Despite it being XP’s last gasp from a security standpoint, it’s actually a...
MS14-019: Vulnerability in Windows file handling component could allow remote code execution: April 8, 2014
None None...
MS14-019: Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2922229)
The remote Windows host is potentially affected by a vulnerability in the way that Windows processes .bat and .cmd files that could allow remote code execution if a user is convinced to run a specially crafted .bat or .cmd file. When exploiting this vulnerability, an attacker could gain the same...
UBUNTU-CVE-2001-1593
Jakub Wilk found that a2ps, a tool to convert text and other types of files to PostScript, insecurely used a temporary file in spyuser. A local attacker could use this flaw to perform a symbolic link attack to modify an arbitrary file accessible to the user running a2ps...
CentOS Update for php CESA-2014:0311 centos5
Check for the Version of php OpenVAS Vulnerability Test CentOS Update for php CESA-2014:0311 centos5 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
CentOS Update for php CESA-2014:0311 centos5
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 5 : php (ELSA-2014-0311)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0311 advisory. 5.1.6-44 - add security fixes for CVE-2006-7243, CVE-2009-0689 Tenable has extracted the preceding description block directly from the Oracle Linux...
RHEL 5 : php (RHSA-2014:0311)
Updated php packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availabl...
CentOS 5 : php (CESA-2014:0311)
Updated php packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are availabl...
Microsoft DirectShow CVE-2014-0301 Remote Code Execution Vulnerability
Description Microsoft DirectShow is prone to a remote code-execution vulnerability. Successful exploits allow remote attackers to execute arbitrary code in the context of the user running the application that uses DirectShow. Failed exploit attempts will result in a denial-of-service condition...
MGASA-2014-0118 Updated python-logilab-common packages fix security vulnerabilities
Updated python-logilab-common packages fix security vulnerabilities about temporary file handling CVE-2014-1838 and CVE-2014-1839...
Updated python-logilab-common packages fix security vulnerabilities
Updated python-logilab-common packages fix security vulnerabilities about temporary file handling CVE-2014-1838 and CVE-2014-1839...
ImageMagick 6.8.8-4 - Local Buffer Overflow (SEH)
ImageMagick 6.8.8-4 - Local Buffer Overflow SEH !/usr/bin/perl Exploit Title: ImageMagick 6.8.8-5 - Local Buffer Overflow SEH Date: 2-13-2014 Exploit Author: Mike Czumak Tv3rn1x -- @SecuritySift Vulnerable Software: ImageMagick all versions prior to 6.8.8-5 Software Link:...
MGASA-2014-0068 Updated perl-Capture-Tiny package fixes security vulnerability
perl-Capture-Tiny before 0.24 used files in /tmp in an insecure manner CVE-2014-1875...
MGASA-2014-0041 Updated mupdf packages fix a buffer overflow
Updated mupdf packages fix security vulnerability: A stack-based buffer overflow was found in mupdf's xpsparsecolor function. An attacker could create a specially crafted XPS file that, when opened, could cause mupdf or an application using mupdf to crash...
A10 Networks AX Loadbalancer Directory Traversal
This module exploits a directory traversal flaw found in A10 Networks Soft AX Loadbalancer version 2.6.1-GR1-P5/2.7.0 or less. When handling a file download request, the xml/downloads class fails to properly check the 'filename' parameter, which can be abused to read any file outside the virtual...
Adult Webmaster PHP密码泄露漏洞
No description provided by source. 1 Administrative Credential Disclosure PoC: root@kali:/ curl http://localhost/home/caspers/publichtml/demo/admin/userpwdadfasdfre.txt admin:3a4ebf16a4795ad258e5408bae7be341 Vulnerable Code: + admin/common.php // Check user existance $pfile =...
NCH Software Express Burn Plus 4.68 Buffer Overflow
NCH Software Express Burn Plus version 4.68 suffers from an EBP project file handling buffer overflow vulnerability. !/usr/local/bin/perl NCH Software Express Burn Plus 4.68 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected...
Adult WebMaster PHP - Password Disclosure
Adult WebMaster PHP - Password Disclosure + Exploit:Adult Webmaster PHP - Password Disclosure + Author: vinicius777 + Email/Twitter: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/adultweb/ 1 Administrative Credential Disclosure PoC: root@kali:/ curl...