1301 matches found
Microsoft .NET Framework Chart Control Information Disclosure Vulnerability (2567943)
This host is missing an important security update according to Microsoft Bulletin MS11-066. OpenVAS Vulnerability Test $Id: secpodms11-066.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft .NET Framework Chart Control Information Disclosure Vulnerability 2567943 Authors: Sooraj KS Copyright: Copyrig...
Microsoft .NET Framework Chart Control Information Disclosure Vulnerability (2567943)
This host is missing an important security update according to Microsoft Bulletin MS11-066. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2011-1977
The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart Control Information...
Information disclosure
The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart Control Information...
CVE-2011-1977
The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart Control Information...
CVE-2011-1977
CVE-2011-1977 describes an information-disclosure vulnerability in Microsoft Chart Control used by ASP.NET Chart controls in .NET Framework 4 and Chart Control for .NET Framework 3.5 SP1. The issue arises from improper verification of functions within URIs, enabling a remote attacker to read arbi...
PT-2011-3518 · Microsoft · .Net Framework 4 +2
Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework 4 Chart Control for Microsoft .NET Framework 3.5 SP1 Description: An information disclosure issue exists due to the improper handling of special characters within a specially crafted URI by Microsoft Chart controls...
MS11-066: Vulnerability in Microsoft Chart Control Could Allow Information Disclosure (2567943)
An information disclosure vulnerability exists in the version of Microsoft Chart Control installed on the remote Windows host due to improper handling of special characters in the URI included in an HTTP GET request. If a web application hosted on the affected system uses Microsoft Chart Control,...
MS11-066: Vulnerability in Microsoft Chart Control could allow information disclosure: August 9, 2011
Describes a security release that resolves vulnerabilities in Microsoft Chart Control that could allow information disclosure.IntroductionMicrosoft has released security bulletin MS11-066. To view the complete security bulletin, visit one of the following Microsoft websites: Home...
Microsoft ASP.NET Chart Control Information Disclosure (MS11-066; CVE-2011-1977)
An information disclosure vulnerability has been reported in Microsoft Chart Controls. Chart Controls is a chart creation tool which enables users to create charts within ASP.NET pages. A remote attacker could exploit this vulnerability to retrieve any file from an affected ASP.NET page. This is ...
Microsoft .NET Framework Chart Control Information Disclosure Vulnerability
Description The Microsoft .NET Framework is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks. Attackers can exploit this issue by submitting a specially crafted request to a vulnerable...
MS11-066: Description of the security update for Microsoft Chart Controls for .NET Framework 3.5 Service Pack 1: August 9, 2011
None None...
JFreeChart - Path Disclosure vulnerability
JFreeChart - Path Disclosure http://www.osisecurity.com.au/advisories/jfreechart-path-disclosure Release Date: 17-Jun-2011 Software: JFree.org - JFreeChart http://www.jfree.org/ "A free Java chart library. JFreeChart supports pie charts 2D and 3D, bar charts horizontal and vertical, regular and...
SuSE 10 Security Update : Libreoffice (ZYPP Patch Number 7365)
Maintenance update to LibreOffice-3.3.1. It adds some interesting features, fixes many bugs, including several security vulnerabilities. LibreOffice is continuation of the OpenOffice.org project. This update replaces the OpenOffice.org installation, including helper packages, e.g. dictionaries,...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allow remote attackers to hijack the authentication of arbitrary users for requests related to 1 adding a saved search in buglist.cgi, 2 voting in...
CVE-2011-0046
Multiple cross-site request forgery CSRF vulnerabilities in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allow remote attackers to hijack the authentication of arbitrary users for requests related to 1 adding a saved search in buglist.cgi, 2 voting in...
OpenX Open Flash Chart ofc_upload_image.php File Upload Arbitrary Code Execution
The third-party Open Flash Chart component included with the version of OpenX hosted on the remote web server allows an unauthenticated attacker to upload arbitrary files to the affected system, by default in a web-accessible directory. While Nessus has not verified this, it is likely that an...
PYSEC-2010-17
Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to 1 action/LikePages.py, 2 action/chart.py, and 3 action/userprofile.py, a similar issue to...
CVE-2010-2969
Removed by vendor...
My Kazaam Notes Management System SQL Injection / Cross Site Scripting
Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: My Kazaam Notes Management System Multiple Vulnerability Vendor url:http://www.mykazaam.com Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz:...