Code injection

The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate...

CVE-2014-0837

The AutoUpdate process in IBM Security QRadar SIEM 7.2 MR1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers via a crafted certificate...

CVE-2014-0838

The AutoUpdate package before 6.4 for IBM Security QRadar SIEM 7.2 MR1 and earlier allows remote attackers to execute arbitrary console commands by leveraging control of the server...

CVE-2014-0838

CVE-2014-0838 affects IBM QRadar SIEM: the AutoUpdate component (before 6.4) on QRadar SIEM 7.2 MR1 and earlier allows remote execution of console commands when an attacker can control the update server. Root cause: flaw in the AutoUpdate process that enables arbitrary command execution without l...

CVE-2014-0837

The CVE-2014-0837 issue affects IBM QRadar SIEM (and related QRadar components) where the AutoUpdate process does not verify SSL certificates, allowing MITM attackers to spoof the update server and potentially tamper data. Affected products include QRadar SIEM 7.2 MR1 and earlier (QRM/QVM). The r...

Scientific Linux Security Update : yum-autoupdate update on SL5.x, SL6.x i386/x86_64 (20120925)

The Scientific Linux team was made aware of a problem with the use of temp files in the yum-autoupdate script by Elias Persson. The problem should be corrected in these packages. These packages also include some minor feature updates for each release. For SL5, the script now includes the 'PRERUN'...

Expert Warns That WordPress Autoupdate Feature Used To Infect Blogs With Malware

UPDATE: More than 1,000 WordPress blogs are currently being infected by a form of malware that has ‘piggybacked’ its way onto the blogging platform using the WordPress automatic update function, a security researcher has discovered. According to Denis Sinegubko, founder of Unmask Parasites, the...

RealNetworks RealPlayer Multiple Vulnerabilities (Aug 2011) - Windows

RealPlayer is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2954

Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors...

Design/Logic Flaw

Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-2954

Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-2954

CVE-2011-2954 is a use-after-free vulnerability in RealNetworks RealPlayer, affecting RealPlayer 11.0–11.1 and 14.0.0–14.0.5 (and RealPlayer SP 1.0–1.1.5) when using an Embedded RealPlayer. The issue occurs in the Embedded AutoUpdate path and can allow remote attackers to execute arbitrary code v...

CVE-2010-0990

Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01, allows remote attackers to execute arbitrary code via vectors related to the BrowseFolder method...

Stack overflow

Stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0, as used in Creative Software AutoUpdate 1.40.01, allows remote attackers to execute arbitrary code via vectors related to the BrowseFolder method...

CVE-2010-0990

CVE-2010-0990 describes a stack-based buffer overflow in Creative Software AutoUpdate Engine ActiveX Control 2.0.12.0 (bundled with AutoUpdate 1.40.01). The vulnerability exists in the BrowseFolder method and can be triggered remotely to execute arbitrary code. Public references identify the affe...

Creative Software AutoUpdate Engine - ActiveX Control Buffer Overflow (Metasploit)

$Id: creativesoftwarecachefolder.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

JDownloader Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Product JDownloader1 is an open source download manager for One-Click- Filehoster like Rapidshare or Megaupload. The Click'n'Load2 interface allows external applications and websites to send URLs to the local running JDownloader. With Click'n'Loa...

HP ProCurve Identity Driven Manager (IDM)未明特权提升漏洞

Bugraq ID: 36462 CVE ID：CVE-2009-2681 HP ProCurve Identity Driven Manager是一款允许网管员动态分配用户及设备的网络链接及访问，以适应不同业务策略。 在运行IAS的Microsoft Windows 2003和Windows 2008系统平台运行HP ProCurve Identity Driven Manager存在未明错误。 本地攻击者可以利用此漏洞提升特权。 HP ProCurve Identity Driven Manager IDM A.03.00 HP ProCurve Identity Driven...

MailScanner Multiple Insecure Temporary Files Vulnerabilities

MailScanner is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MailScanner Multiple Insecure Temporary Files Vulnerabilities

This host is installed with MailScanner and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmailscannermultvuln.nasl 7823 2017-11-20 08:54:04Z cfischer $ MailScanner Multiple Insecure Temporary Files Vulnerabilities Authors: Sujit Ghosal Copyright: Copyright c 2008 Greenbo...