148 matches found
CVE-2011-3144: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Control Microsystems ClearSCADA 2005, 2007, and 2009 before R2.3 and R1.4, as used in SCX before 67 R4.5 and 68 R3.9, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2011-4272
Name of the Vulnerable Software and Affected Versions Control Microsystems ClearSCADA versions 2005 through 2009 before R2.3 and R1.4 SCX versions prior to 67 R4.5 and 68 R3.9 Description The issue is related to a use-after-free vulnerability that can be triggered by remote attackers using...
Design/Logic Flaw
The wrapsetuidthirdpartyapplication function in the installation script for the Samsung SCX-4200 Driver 2.00.95 adds setuid permissions to third party applications such as xsane and xscanimage, which allows local users to gain privileges...
CVE-2007-3931
The wrapsetuidthirdpartyapplication function in the installation script for the Samsung SCX-4200 Driver 2.00.95 adds setuid permissions to third party applications such as xsane and xscanimage, which allows local users to gain privileges...
CVE-2007-3931
The wrapsetuidthirdpartyapplication function in the installation script for the Samsung SCX-4200 Driver 2.00.95 adds setuid permissions to third party applications such as xsane and xscanimage, which allows local users to gain privileges...
CVE-2007-3931
CVE-2007-3931 affects the Samsung SCX-4200 Driver 2.00.95 installation script. The wrap_setuid_third_party_application function grants setuid permissions to third-party applications (e.g., xsane, xscanimage), enabling local users to escalate privileges. Documented impact is privilege escalation f...
CVE-2007-3931: Undefined Security Weakness
The wrapsetuidthirdpartyapplication function in the installation script for the Samsung SCX-4200 Driver 2.00.95 adds setuid permissions to third party applications such as xsane and xscanimage, which allows local users to gain privileges...