Citrix Presentation Server Client 9.200 WFICA.OCX ActiveX Component Heap Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21458/info Citrix Presentation Server Client is prone to a heap buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer. An...

discuz! 7.1 and 7.2 remote code execution vulnerability exp-vulnerability warning-the black bar safety net

The first method: First register a user and then put form method="post" action=" http://www.xxx.com/bbs/misc.php" enctype="multipart/form-data" Post ID, specify the presence of a post:input type="text" name="tid" value="1" / input type="hidden" name="action" value="immebinding" / input...

CVE-2013-1609

Multiple unquoted Windows search path vulnerabilities in the 1 File Collector and 2 File PlaceHolder services in Symantec Enterprise Vault EV for File System Archiving before 9.0.4 and 10.x before 10.0.1 allow local users to gain privileges via a Trojan horse program...

CVE-2013-1609

Multiple unquoted Windows search path vulnerabilities in the 1 File Collector and 2 File PlaceHolder services in Symantec Enterprise Vault EV for File System Archiving before 9.0.4 and 10.x before 10.0.1 allow local users to gain privileges via a Trojan horse program...

PT-2013-3272

Name of the Vulnerable Software and Affected Versions Symantec Enterprise Vault EV for File System Archiving versions prior to 9.0.4 Symantec Enterprise Vault EV for File System Archiving versions 10.x prior to 10.0.1 Description The issue concerns unquoted Windows search path vulnerabilities in...

Google Chrome < 23.0.1271.64 Multiple Vulnerabilities

Binary data 800919.prm...

Google Chrome Multiple Vulnerabilities - Nov2012 (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov12win.nasl 5931 2017-04-11 09:02:04Z teissa $ Google Chrome Multiple Vulnerabilities - Nov2012 Windows Authors: Antu Sanadi Copyright: Copyright c 2012...

Google Chrome Multiple Vulnerabilities - Nov2012 (Linux)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov12lin.nasl 5999 2017-04-21 09:02:32Z teissa $ Google Chrome Multiple Vulnerabilities - Nov2012 Linux Authors: Antu Sanadi Copyright: Copyright c 2012...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 157079 Medium CVE-2012-5127: Integer overflow leading to out-of-bounds read in WebP handling. Credit to Phil Turnbull. Linux 64-bit only 150729 Medium CVE-2012-5120: Out-of-bounds array access in v8. Credit to Atte Kettunen of OUSPG. 143761 High CVE-2012-5116:...

Multiple Vulnerabilities in Cisco Wireless LAN Controllers

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2009-4032

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 graph.php, 2 include/topgraphheader.php, 3 lib/htmlform.php, and 4 lib/timespansettings.php, as demonstrated by the a graphend or b graphstart...

Newsolved 1.1.6 (login grabber) Multiple SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== Newsolved 1.1.6 login grabber Multiple SQL Injection Exploit ============================================================== !/usr/bin/perl -w Neversolved.pl Copyright c 2009 by...

PPT 0day-vulnerability warning-the black bar safety net

Author: wordexp ppt "0day"configuration mode:new keys a PPT,find a 9f 0f 0 4 0 0 0 0 0 0,put back the byte to 0 3 0 0 0 0 0 0 TextHeaderAtom 3 9 9 9,9f0f,atom: this record indicates that after the text atom of meaning that can be used to distinguish text is separated into different blocks Value...

CVE-2008-3223

SQL injection vulnerability in the Schema API in Drupal 6.x before 6.3 allows remote attackers to execute arbitrary SQL commands via vectors related to "an inappropriate placeholder for 'numeric' fields."...

CVE-2004-9998

CVE-2004-9998 is rejected/not used; this placeholder does not represent an active vulnerability.

CVE-2004-9999

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate has been used as a placeholder by multiple organizations for multiple issues, but it is invalid. Notes: All CVE users should search CVE for the proper identifier. All references and descriptions in this...

CVE-2004-9998

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate has been used as a placeholder by multiple organizations for multiple issues, but it is invalid. Notes: All CVE users should search CVE for the proper identifier. All references and descriptions in this...

CVE-1999-0110

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0315. Reason: This candidate's original description had a typo that delayed it from being detected as a duplicate of CVE-1999-0315. Notes: All CVE users should reference CVE-1999-0315 instead of this candidate. All references...

Possible cross-site scripting (XSS) vulnerability in the Blade templating engine

A security researcher has disclosed a possible XSS vulnerability in the Blade templating engine. Given the following two Blade templates: resources/views/parent.blade.php: html @section'content' @show resources/views/child.blade.php: html @extends'parent' @section'content' @endsection And a route...