345 matches found
Halloween Linux 4.0,S.u.S.E. Linux 6.0/6.1/6.2/6.3 kreatecd Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1061/info A vulnerability exists in the kreatecd program for Linux. This program is a graphical front end to the cdrecord program, and is installed setuid root. This program will blindly trust the configuration of the pat...
MS Virtual Machine 2000/3100/3200/3300 Series com.ms.activeX.ActiveXComponent Arbitrary Program Execution
No description provided by source. source: http://www.securityfocus.com/bid/1754/info If a malicious website operator were to embed a specially crafted java object into a HTML document, it would be possible to execute arbitrary programs on a target host viewing the webpage through either Microsof...
Design/Logic Flaw
VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors...
CVE-2014-1209
VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors...
PT-2014-4014
Name of the Vulnerable Software and Affected Versions VMware vSphere Client versions 4.0 through 5.1 before Update 2 Description The issue is related to improper validation of updates to Client files, allowing remote attackers to trigger the downloading and execution of an arbitrary program...
CVE-2014-1209: Improper Input Validation
VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors...
CVE-2014-0758: Exposed Dangerous Method or Function
An ActiveX control in GenLaunch.htm in ICONICS GENESIS32 8.0, 8.02, 8.04, and 8.05 allows remote attackers to execute arbitrary programs via a crafted HTML document...
PT-2014-3820
Name of the Vulnerable Software and Affected Versions ICONICS GENESIS32 versions 8.0 through 8.05 Description The issue allows remote attackers to execute arbitrary programs via a crafted HTML document, specifically through an ActiveX control in GenLaunch.htm. Recommendations For ICONICS GENESIS3...
PT-2014-2634
Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Automation MC-WorX Suite version 8.02 Description The issue allows remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click. This is made possible by a...
PT-2014-4331
Name of the Vulnerable Software and Affected Versions Jetro COCKPIT Secure Browsing JCSB versions 4.3.1 through 4.3.3 Description The issue concerns the client in Jetro COCKPIT Secure Browsing JCSB that fails to validate the FileName element in an RDP FILE TRANSFER document. This allows remote JC...
CVE-2013-3630
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor...
PT-2013-5948
Name of the Vulnerable Software and Affected Versions WellinTech KingView versions prior to 6.53 SuperGrid.ocx versions prior to 65.30.30000.10002 Description The issue concerns the SUPERGRIDLib.SuperGrid ActiveX control, which does not properly restrict ReplaceDBFile method calls. This allows...
PT-2013-2122
Name of the Vulnerable Software and Affected Versions Mutiny versions prior to 5.0-1.11 Description The issue allows remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service via multiple directory traversal vulnerabilities in the...
CVE-2013-0136: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in the EditDocument servlet in the Frontend in Mutiny before 5.0-1.11 allow remote authenticated users to upload and execute arbitrary programs, read arbitrary files, or cause a denial of service file deletion or renaming via 1 the uploadPath parameter...
CVE-2012-3022
The SaveToFile method in a certain ActiveX control in TrendDisplay.dll in Canary Labs TrendLink 9.0.2.27051 and earlier does not properly restrict the creation of files, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted w...
CVE-2012-3022: Undefined Security Weakness
The SaveToFile method in a certain ActiveX control in TrendDisplay.dll in Canary Labs TrendLink 9.0.2.27051 and earlier does not properly restrict the creation of files, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted w...
PT-2013-2691
Name of the Vulnerable Software and Affected Versions Google Chrome versions 25.0.1364.97 and earlier on Linux Google Chrome versions 25.0.1364.99 and earlier on Mac OS X Description The issue is related to the improper handling of pathnames during copy operations, which could facilitate the...
PT-2013-1953
Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.67 Opera versions 12.x prior to 12.02 Description The issue allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execution of arbitrary programs, via a crafted web site...
PT-2012-3903
Name of the Vulnerable Software and Affected Versions Mahara versions 1.4.x through 1.4.4 Mahara versions 1.5.x through 1.5.3 Description The issue allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav. It can also be exploited without...
CVE-2012-2244: Undefined Security Weakness
Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav. NOTE: this can be exploited without authentication by leveraging CVE-2012-2243...