1063 matches found
CVE-2011-4045: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in an unspecified ActiveX control in aipgctl.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to cause a denial of service via a crafted HTML document...
KLA10292 Multiple vulnerabilities in PcVue
Multiple critical vulnerabilities have been found in PcVue. Malicious users can exploit these vulnerabilities to execute arbitrary code, modify local files or cause denial of service. Below is a complete list of vulnerabilities 1. Unspecified vectors can be exploited remotely; 2. A buffer overflo...
Arc Informatique产品多个ActiveX控件漏洞
CVE ID: CVE-2011-4042,CVE-2011-4043,CVE-2011-4044,CVE-2011-4045 ARC Informatique是开发人机接口、监控和数据捕获HMI/SCADA软件的法国公司。 多个Arc Informatique产品在实现上存在多个安全漏洞，可被恶意用户利用操作某些数据并控制用户系统。 1）处理"SaveObject"和"LoadObject"方法SVUIGrd.ocx时存在的错误可被利用通过特制的"aStream"参数执行虚拟函数调用任意内存位置； 2）"GetExtendedColor"方法SVUIGrd.ocx中的错误可被利用破坏内...
ARC Informatique PcVue HMI/SCADA ActiveX Vulnerabilities
Overview This Advisory is a follow-up to the Alert, “ICS-ALERT-11-271-01 - ARC Informatique PcVue HMI/SCADA ActiveX Vulnerabilities.” ICS-CERT is aware of publicly and privately disclosed reports of four vulnerabilities in ARC Informatique’s PcVue application. These vulnerabilities include:...
Hackers Steal Customer Data from McDonald's Partner Database
McDonald's is collaborating with law enforcement after malicious hackers infiltrated another company's database and stole information about an unknown number of the fast-food chain's customers. McDonald's has alerted potentially affected customers via email and through a message on its website. "...
CVE-2010-3372
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...
Design/Logic Flaw
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...
CVE-2010-3372
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...
CVE-2010-3372
CVE-2010-3372 affects NorduGrid ARC prior to 0.8.3, where an untrusted search path via LD_LIBRARY_PATH allows local users to escalate privileges. Affected component: ARC’s runtime/library loading; root cause is improper handling of LD_LIBRARY_PATH. Impact per sources is privilege escalation on lo...
PT-2010-4771
Name of the Vulnerable Software and Affected Versions NorduGrid Advanced Resource Connector ARC versions prior to 0.8.3 Description The issue is related to an untrusted search path vulnerability, allowing local users to gain privileges. This is achieved through vectors related to the LD LIBRARY...
CVE-2010-3372: Undefined Security Weakness
Untrusted search path vulnerability in NorduGrid Advanced Resource Connector ARC before 0.8.3 allows local users to gain privileges via vectors related to the LDLIBRARYPATH environment variable. NOTE: some of these details are obtained from third party information...
Blue Arc Group - IgnitionSuite CMS WebDMailer unsubscribe issue
aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 08-Jun-2010 Software: Blue Arc Group - IgnitionSuite Web Content Management System CMS http://www.bluearcgroup.com/ "With IgnitionSuite Web CMS, easy to use tools are at your fingertips. You can...
xorg-x11-server security update
1.1.1-48.76.0.1.el55.1 - Added oracle-enterprise-detect.patch - Replaced 'Red Hat' in spec file 1.1.1-48.76.1 - xserver-1.1.1-mod-macro-parens.patch: Fix insufficient parentheses in Render and arc computation code. 495733...
SLES9: Security update for arc
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: arc For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015664 within the SuSE...
SLES9: Security update for arc
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: arc For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5015664 within the SuSE...
SuSE9 Security Update : arc (YOU Patch Number 10496)
This updates fixes two bugs : - Eric Romang discovered that the ARC archive program under Unix creates a temporary file with insecure permissions which may lead to an attacker stealing sensitive information. CVE-2005-2945 - Joey Schulze discovered that the temporary file was created in an insecur...
CVE-2008-1491
CVE-2008-1491 affects the ASUS DpcProxy.exe within ASUS Remote Console (ARC/ASMB3). The vulnerability is a stack-based buffer overflow in the DPC Proxy server, exploitable remotely by sending a long string to TCP port 623, impacting versions 2.0.0.19 and 2.0.0.24. Public references include Exploi...
Debian Security Advisory DSA 843-1 (arc)
The remote host is missing an update to arc announced via advisory DSA 843-1. Two vulnerabilities have been discovered in the ARC archive program under Unix. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-2945 Eric Romang discovered that the ARC archi...
Debian: Security Advisory (DSA-843-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
