876 matches found
PT-2014-3212
Name of the Vulnerable Software and Affected Versions CRU Ditto Forensic FieldStation versions prior to 2013Oct15a Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 sector size or 2 skip count fields for the forensic imaging task...
OpenJDK: InputStream skip() information leak (Networking/IO, 7000600)
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown...
Oracle Linux 5 / 6 : java-1.6.0-openjdk (ELSA-2011-1380)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1380 advisory. 1:1.6.0.0-1.40.1.9.10 - Resolves: rhbz744788 - Bumped to IcedTea6 1.9.8 -removed font copying Security fixes - S7000600, CVE-2011-3547: InputStream...
Mozilla: Memory corruption found using Address Sanitizer (MFSA 2013-48)
The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via unspecified vectors...
GLSA-201201-15 : ktsuss: Privilege escalation
The remote host is affected by the vulnerability described in GLSA-201201-15 ktsuss: Privilege escalation Two vulnerabilities have been found in ktuss: Under specific circumstances, ktsuss skips authentication and fails to change the effective UID back to the real UID CVE-2011-2921. The GTK...
RHEL 6 : java-1.6.0-ibm (RHSA-2012:0034)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0034 advisory. The IBM Java SE version 6 release includes the IBM Java 6 Runtime Environment and the IBM Java 6 Software Development Kit. This update fixes...
OpenJDK: InputStream skip() information leak (Networking/IO, 7000600)
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown...
OpenJDK: InputStream skip() information leak (Networking/IO, 7000600)
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown...
OpenJDK: InputStream skip() information leak (Networking/IO, 7000600)
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown...
OpenJDK: InputStream skip() information leak (Networking/IO, 7000600)
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown...
Critical: Red Hat Security Advisory: flash-plugin - End Of Life
This update disables Adobe Flash Player 9 on Red Hat Enterprise Linux 4, as it contains multiple security flaws and should no longer be used. The Red Hat Security Response Team has rated this update as having critical security impact. The flash-plugin package contains a Mozilla Firefox compatible...
MY-CCMS All Ver File Upload 0day-vulnerability warning-the black bar safety net
The vulnerability is located in: manage/upload.php code province ! ! 111.jpg Download 22.49 KB 4 hours ago Also you can create new“. asp”directory, there is a skip directory vulnerability, etc. EXP: the form id="frmUpload" enctype="multipart/form-data" action="http://chemlg.com/manage/upload.php"...
Cross site scripting
Cross-site scripting XSS vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Sql injection
SQL injection vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2009-1909
SQL injection vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2009-1908
Cross-site scripting XSS vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-1908
CVE-2009-1908 is a cross-site scripting (XSS) vulnerability in SKIP up to version 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC. The vulnerability page confirms that an arbitrary script could be injected and executed in affected SKIP web interfaces. The JVN entries (JVNDB-2009-000025 and JVN432...
CVE-2009-1909
CVE-2009-1909 affects SKIP from SKIP User Group; versions 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC contain a SQL injection vulnerability that allows remote execution of arbitrary SQL via unspecified vectors. Root cause is improper input handling in SKIP’s SQL paths. Impact includes potenti...
