Lucene search
K

1464 matches found

NVD
NVD
added 2011/03/23 2:0 a.m.19 views

CVE-2011-0187

The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect...

4.3CVSS7.7AI score0.00598EPSS
Exploits1References7
CVE
CVE
added 2011/03/23 1:0 a.m.65 views

CVE-2011-0187

CVE-2011-0187 affects Mac OS X via the CoreMedia/QuickTime path: a cross-origin redirect in CoreMedia could bypass Same Origin Policy and allow access to potentially sensitive video data. The public details in connected docs indicate this is tied to OS X Lion/QuickTime/CoreMedia components, with ...

4.3CVSS5.7AI score0.00598EPSS
Exploits1References7Affected Software1
Cvelist
Cvelist
added 2011/03/23 1:0 a.m.21 views

CVE-2011-0187

The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect...

6.2AI score0.00598EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2011/03/15 12:0 a.m.38 views

Flash Player < 10.2.153.1 Unspecified Memory Corruption (APSB11-05)

The remote Windows host contains a version of Adobe Flash Player earlier than 10.2.153.1. Such versions are affected by an unspecified memory corruption vulnerability. A remote attacker could exploit this by tricking a user into viewing maliciously crafted SWF content, resulting in arbitrary code...

9.3CVSS7.9AI score0.92079EPSS
Exploits8References4
NVD
NVD
added 2011/03/08 9:59 p.m.12 views

CVE-2011-1309

The Plug-in component in IBM WebSphere Application Server WAS before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors...

7.5CVSS6.3AI score0.00401EPSS
Exploits0References4
Prion
Prion
added 2011/03/08 9:59 p.m.17 views

Design/Logic Flaw

The Plug-in component in IBM WebSphere Application Server WAS before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors...

7.5CVSS6.9AI score0.00401EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2011/03/08 9:0 p.m.52 views

CVE-2011-1309

Summary: CVE-2011-1309 affects IBM WebSphere Application Server (WAS) 7.x prior to 7.0.0.15, where the Plug-in component does not properly handle trace requests. The impact is described as unspecified in the sources; no explicit exploitation details are provided. The issue is linked to multiple v...

7.5CVSS6.5AI score0.00401EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2011/03/08 9:0 p.m.22 views

CVE-2011-1309

The Plug-in component in IBM WebSphere Application Server WAS before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors...

6.3AI score0.00401EPSS
Exploits0References4
myhack58
myhack58
added 2011/03/05 12:0 a.m.14 views

ewebeditor 2.8 commercial version of the backend plug in a word and fix-vulnerability warning-the black bar safety net

Affected version:2.8 Business Edition Attack use:login background, click on Change Password---new password set to 1":eval request"a"’ Set after the success, the access to asp/config. asp file, the word Trojan is written to this file inside the In this paper, ewebeditor commercial version...

2.6AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2011/03/02 12:0 a.m.39 views

RHEL 4 : seamonkey (RHSA-2011:0313)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

10CVSS8.4AI score0.03206EPSS
Exploits1References7
myhack58
myhack58
added 2011/02/23 12:0 a.m.13 views

Discuz entertainment Hall plug-in V1. 0 injection vulnerability and fix-vulnerability warning-the black bar safety net

| Author:0x0F From:0xsec.org Vulnerability Details: sid variable without filtration generated SQL injection. Exploits:http://site/plugin. php? id=huxhall:huxhall&sid=1 You know. KeyWords:inurl:huxhall:huxhall Related companies:Le tour network HappyYux.com Repair Methods:filtration Has a patch:No...

8.2AI score
Exploits0
OpenVAS
OpenVAS
added 2011/02/17 12:0 a.m.30 views

Google Chrome Multiple Denial of Service Vulnerabilities (Feb 2011) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6AI score0.02353EPSS
Exploits4References1
OpenVAS
OpenVAS
added 2011/02/17 12:0 a.m.33 views

Google Chrome Multiple Denial of Service Vulnerabilities - February 11(Linux)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnfeb11lin.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Chrome Multiple Denial of Service Vulnerabilities - February 11Linux Authors: Madhuri D Copyright: Copyright...

10CVSS0.3AI score0.02353EPSS
Exploits4References1
OpenVAS
OpenVAS
added 2011/02/17 12:0 a.m.37 views

Google Chrome Multiple Denial of Service Vulnerabilities (Feb 2011) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6AI score0.02353EPSS
Exploits4References1
Prion
Prion
added 2011/02/10 7:0 p.m.23 views

Out-of-bounds

Google Chrome before 9.0.597.94 does not properly handle plug-ins, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

5CVSS6.8AI score0.01759EPSS
Exploits0References9Affected Software2
Cvelist
Cvelist
added 2011/02/10 6:0 p.m.21 views

CVE-2011-0984

Google Chrome before 9.0.597.94 does not properly handle plug-ins, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...

6.1AI score0.01759EPSS
Exploits0References9
Debian CVE
Debian CVE
added 2011/02/10 6:0 p.m.31 views

CVE-2011-0984

Removed by vendor...

5CVSS6.7AI score0.01759EPSS
Exploits0
CVE
CVE
added 2011/02/10 6:0 p.m.72 views

CVE-2011-0984

CVE-2011-0984 affects Google Chrome prior to 9.0.597.94, where the browser mishandles plug-ins, enabling a remote attacker to cause a denial of service via an out-of-bounds read. Public sources (including Debian DSA-2166-1 and OpenVAS entries) corroborate the family of Chrome/Chromium vulnerabili...

5CVSS6.2AI score0.01759EPSS
Exploits0References9Affected Software1
Tenable Nessus
Tenable Nessus
added 2011/02/10 12:0 a.m.46 views

RHEL 5 / 6 : flash-plugin (RHSA-2011:0206)

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which...

9.3CVSS6.1AI score0.09534EPSS
Exploits0References28
Tenable Nessus
Tenable Nessus
added 2011/02/09 12:0 a.m.29 views

Google Chrome < 9.0.597.94 Multiple Vulnerabilities

Binary data 5780.pasl...

9.3CVSS9AI score0.01944EPSS
Exploits0References2
Rows per page
Query Builder