95 matches found
Logical design flaws in mallbuilder e-commerce system
MallBuilder is a multi-user online shopping mall solution based on PHP + MYSQL. A logical design vulnerability exists in the mallbuilder e-commerce system. An attacker can exploit this vulnerability to modify database information...
Cisco Elastic Services Controller Information Disclosure Vulnerability (CNVD-2017-11575)
Cisco Elastic Services Controller is a cloud and systems management solution. Cisco Elastic Services Controllers have a security vulnerability in the file system implementation, where a local attacker obtains sensitive information about an affected system...
The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to obtain confidential information from the process’s memory.
The vulnerability of the WebKit component of the iOS operating system and the Safari browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from the process’s memory through a...
The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or increase their privileges.
The vulnerability of the Intel Graphics Driver component for the Mac OS X operating system is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...
The vulnerability of the multimedia player iTunes and the iOS operating system allows a hacker to execute arbitrary code or trigger a service failure.
The vulnerability of the WebKit component in the multimedia player iTunes and the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted...
The vulnerability of the Security SiteProtector System’s security protection mechanism allows a hacker to execute arbitrary web or HTML code.
The vulnerability of the Security SiteProtector System security system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary web or HTML code remotely...
Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20150210)
A flaw was found in the way the Linux kernel's splice system call validated its parameters. On certain file systems, a local, unprivileged user could use this flaw to write past the maximum file size, and thus crash the system. CVE-2014-7822, Moderate This update also fixes the following bugs : -...
USN-1431-1: Linux kernel vulnerabilities
A flaw was found in the Linux's kernels ext4 file system when mounted with a journal. A local, unprivileged user could exploit this flaw to cause a denial of service. CVE-2011-4086 Sasha Levin discovered a flaw in the permission checking for device assignments requested via the kvm ioctl in the...
Important: Red Hat Security Advisory: java-1.6.0-openjdk security and bug fix update
Updated java-1.6.0-openjdk packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. These packages provide the OpenJDK 6 Java Runtime Environment and...
RHEL 4 : vsftpd (RHSA-2008:0680)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2008:0680 advisory. vsftpd Very Secure File Transfer Protocol FTP daemon is a secure FTP server for Linux and Unix-like systems. The version of vsftpd as shipped in Red...
EUVD-2007-1575
The resource system in PHP 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting the hashupdatefile function via a userspace 1 error or 2 stream handler, which can then be used to destroy and modify internal resources. NOTE: it was later reported that PH...
[SA16920] Mac OS X Security Update Fixes Multiple Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-1999-0594
CVE-1999-0594 describes a lack of access restriction on removable media drives (floppy/CD-ROM) in Windows NT systems. The description is consistent across multiple sources (NVD, CVE List, Red Hat, PT Security), indicating that any user with access to the machine could interact with removable medi...
