SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities

Document Title: =============== SonicWall Viewpoint v6.0 SP2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=195 Release Date: ============= 2011-09-27 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2011-1990

Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote...

Out-of-bounds

Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote...

CVE-2011-1990

CVE-2011-1990 affects Microsoft Excel 2007 SP2, Excel in Office 2007 SP2, Excel Viewer SP2, Office Compatibility Pack SP2, and Excel Services on Office SharePoint Server 2007 SP2. The vulnerability arises from improper validation of the sign of an unspecified array index, allowing remote code exe...

CVE-2011-1980

Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .ppt, or .xls file, aka "Office Component Insecure Library Loading...

CVE-2011-1893

CVE-2011-1893 corresponds to a cross-site scripting (XSS) vulnerability affecting Microsoft SharePoint components: Office SharePoint Server 2010, Windows SharePoint Services 2.0/3.0 SP2, and SharePoint Foundation 2010. The root cause is improper handling of URI parameters, enabling remote attacke...

PT-2011-3530

Name of the Vulnerable Software and Affected Versions Microsoft Excel 2007 SP2 Excel in Office 2007 SP2 Excel Viewer SP2 Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 Excel Services on Office SharePoint Server 2007 SP2 Description The issue is related to the...

CVE-2011-1891: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a request to a script, aka "Contact Details Reflected XSS Vulnerabilit...

CVE-2011-1980: Undefined Security Weakness

Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .ppt, or .xls file, aka "Office Component Insecure Library Loading...

CVE-2011-1893: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via the URI, aka "SharePoint XSS Vulnerability."...

CVE-2011-1990: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote...

CVE-2011-1984: Undefined Security Weakness

WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges by sending crafted packets over the loopback interface, aka "WINS Local Elevation of Privilege Vulnerability."...

PT-2011-3524

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1 Description The issue allows local users to gain privileges by sending crafted packets over the loopback...

CVE-2011-1892: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove Data Bridge Server 2007 SP2, Office Groove Management Server 2007 SP2, Groove Server 2010 Gold and...

PT-2011-3454

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint Server 2010 Windows SharePoint Services 2.0 Windows SharePoint Services 3.0 SP2 SharePoint Foundation 2010 Description A cross-site scripting vulnerability exists, allowing remote attackers to inject arbitrary web...

Reaper 245 (.m3u) Local Buffer Overflow (SEH)

Exploit for windows platform in category local exploits !/usr/bin/perl 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS,...

All Media Fixer Pro Local Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote,...

OpenCart 1.5.1.2 Blind SQL Injection

==================================================== OpenCart v1.5.1.2 = Blind SQL Vulnerability ==================================================== Exploit Title: OpenCart v1.5.1.2 / Blind SQL Vulnerability Date: 08 - 09 - 2011 Author: Rires Walid Software Link: http://www.opencart.com Contact ...

Wonderware InBatch ActiveX Vulnerabilities

Overview ICS-CERT originally released advisory “ICSA-11-332-01P—Invensys Wonderware InBatch ActiveX Vulnerabilities” in the US-CERT secure portal on November 28, 2011. This web page release was delayed to allow users time to download and install the update. Researcher Kuang-Chun Hung of the...

MapServer 6.0 - '.Map' File Double-Free Remote Denial of Service

source: https://www.securityfocus.com/bid/49374/info MapServer is prone to a remote denial-of-service vulnerability due to a double free condition. Attackers can exploit this issue to crash the application, denying service to legitimate users. Due to the nature of this issue, code execution may b...