Lucene search
+L

72 matches found

Tenable Nessus
Tenable Nessus
added 2015/04/16 12:0 a.m.47 views

Scientific Linux Security Update : java-1.7.0-openjdk on SL5.x i386/x86_64 (20150415)

An off-by-one flaw, leading to a buffer overflow, was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Java sandbox...

10CVSS6.2AI score0.06453EPSS
Exploits1References8
Tenable Nessus
Tenable Nessus
added 2015/04/16 12:0 a.m.53 views

Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x, SL7.x i386/srpm/x86_64 (20150415)

An off-by-one flaw, leading to a buffer overflow, was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could possibly cause the Java Virtual Machine to execute arbitrary code, allowing an untrusted Java application or applet to bypass Java sandbox...

10CVSS6.3AI score0.06453EPSS
Exploits1References8
OpenVAS
OpenVAS
added 2015/04/16 12:0 a.m.33 views

CentOS Update for java CESA-2015:0809 centos7

Check the version of java SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882171";...

10CVSS5.4AI score0.06453EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2015/04/15 4:54 p.m.7 views

OpenJDK: insufficient hardening of RSA-CRT implementation (JCE, 8071726)

It was found that the RSA implementation in the JCE component in OpenJDK did not follow recommended practices for implementing RSA signatures...

4.3CVSS6.5AI score0.02853EPSS
Exploits0References7
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.18 views

Joomla JCE Component (com_jce) Blind SQL Injection Vulnerability

No description provided by source...

7.1AI score
Exploits0
Metasploit
Metasploit
added 2013/03/26 11:2 a.m.31 views

Joomla Component JCE File Upload Remote Code Execution

This module exploits a vulnerability in the JCE component for Joomla!, which could allow an unauthenticated remote attacker to upload arbitrary files, caused by the fails to sufficiently sanitize user-supplied input. Sending specially-crafted HTTP request, a remote attacker could exploit this...

8AI score
Exploits0
0day.today
0day.today
added 2012/10/29 12:0 a.m.308 views

Joomla Component com_jce remote Code Injecion / Execution Exploit (perl)

JCE component for Joomla! could allow a remote authenticated attacker to upload arbitrary files, caused by the improper validation of file extensions by the file.php script. By sending a specially-crafted HTTP request, a remote attacker could exploit this vulnerability to upload a malicious PHP...

7.6AI score
Exploits0
NVD
NVD
added 2012/08/30 10:55 p.m.15 views

CVE-2011-5134

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: so...

6CVSS7.3AI score0.01055EPSS
Exploits0References3
Prion
Prion
added 2012/08/30 10:55 p.m.25 views

Unrestricted file upload

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: so...

6CVSS7.8AI score0.01055EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2012/08/30 10:0 p.m.21 views

CVE-2011-5134

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: so...

7.3AI score0.01055EPSS
Exploits0References3
CVE
CVE
added 2012/08/30 10:0 p.m.42 views

CVE-2011-5134

CVE-2011-5134 describes an unrestricted file upload vulnerability in the Joomla! JCE editor component (editor/extensions/browser/file.php) prior to version 2.0.18. The issue allows remote authenticated users with author privileges to upload a file with a double extension (e.g., .php.gif) and ther...

6CVSS7.5AI score0.01055EPSS
Exploits0References3Affected Software1
0day.today
0day.today
added 2011/04/10 12:0 a.m.106 views

Joomla JCE Component (com_jce) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Software: joomlacontenteditor comjce Vendor: www.joomlacontenteditor.net Vuln Type: BLind SQL Injection Download link: http://www.joomlacontenteditor.net/downloads/editor/joomla15x/category/joomla-15-2 check here Author: eidelweiss contact:...

7.1AI score
Exploits0
Rows per page
Query Builder