Oracle Java SE Code Execution Vulnerability (Windows)

This host is installed with Sun Java SE and is prone to code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodoraclejavacodeexecvulnwin.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE Code Execution Vulnerability Windows Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...

KLA12360 ACE vulnerability in Microsoft Windows

Code execution vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability in Human Interface Device HID to execute arbitrary code. Original advisories CVE-2011-0638 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows-Vist...

Unrestricted file upload

Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka...

CVE-2010-3964

CVE-2010-3964 is an unrestricted file upload vulnerability in the Document Conversions Launcher Service of Microsoft Office SharePoint Server 2007 SP2, exploitable when the Document Conversions Load Balancer Service is enabled. A crafted SOAP request to TCP 8082 can lead to remote code execution ...

Microsoft Windows ICSW Remote Code Execution Vulnerability (2443105)

This host is missing a critical security update according to Microsoft Bulletin MS10-097. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Adobe Products Content Code Execution Vulnerability (Windows)

This host has Adobe Acrobat or Adobe Reader or Adobe flash Player installed, and is prone to arbitrary code execution vulnerability. OpenVAS Vulnerability Test $Id: gbadobeprdtsarbitrarycodeexecvulnnov10win.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Products Arbitrary Code Execution...

CVE-2010-4096

share/ma/keysforuser in Monkeysphere 0.31 and 0.32 allows local users to execute arbitrary code via unknown manipulations related to the "monkeysphere-authentication keys-for-user" command...

Adobe Shockwave Player Director File FFFFFF88 Record Integer Overflow (CVE-2010-2876; CVE-2010-4192)

Adobe Shockwave is a multimedia player that allows users to view interactive web content such as games, business presentations, entertainment, and advertisements from the web browser. It allows Adobe Director applications to be published on the Internet and viewed in a web browser on systems whic...

Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability

Exploit for windows platform in category dos / poc ================================================================== Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability ================================================================== Title : Apple QuickTime FLI LinePacket Remote...

Apple QuickTime FlashPix NumberOfTiles Remote Code Execution

Exploit for windows platform in category dos / poc ============================================================ Apple QuickTime FlashPix NumberOfTiles Remote Code Execution ============================================================ ''' Title : Apple QuickTime FlashPix NumberOfTiles Remote Code...

Microsoft Internet Explorer 'OnPropertyChange_Src()' Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Aura...

Gmail Checker Plus Chrome Extension Cross Site Scripting

Gmail Checker plus Chrome extension XSS extension: https://chrome.google.com/extensions/detail/mihcahmgecmbnbcchbopgniflfhgnkff advisore:http://lostmon.blogspot.com/2010/06/gmail-checker-plus-chrome-extension-xss.html Exploit available:yes So in this case "Google Mail Checker Plus" version 1.1.7...

Mozilla Firefox Code Execution Vulnerability (Windows) - May10

The host is installed with Mozilla Firefox browser and is prone to code execution vulnerability OpenVAS Vulnerability Test $Id: gbfirefoxcodeexevulnwinmay10.nasl 5306 2017-02-16 09:00:16Z teissa $ Mozilla Firefox Code Execution Vulnerability Windows - May10 Authors: Antu Sanadi Copyright: Copyrig...

ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability

ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-051 April 5, 2010 -- CVE ID: CVE-2010-0094 -- Affected Vendors: Sun Microsystems -- Affected Products: Sun Microsystems Java Runtime --...

Critical Flaws Haunt Adobe Shockwave Player

Adobe’s run on the patching treadmill continued this week with a “critical” update to fix a pair of code execution holes in its Shockwave Player. The vulnerabilities affect Adobe Shockwave Player 11.5.2.602 and earlier versions, on the Windows and Mac operating systems. According to an Adobe...

Microsoft Office Excel Field Sanitization Remote Code Execution (MS09-067; CVE-2009-3134)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability has been identified in Microsoft Excel. The vulnerability is due to an error in Microsoft Office Excel that fails to properly parse the Excel spreadsheet file format. A remote attacker could trigger this...

Security Update for Microsoft Visio 2002 (KB975365)

A security vulnerability exists in Microsoft Visio 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

RedHat Security Advisory RHSA-2009:1136

The remote host is missing updates announced in advisory RHSA-2009:1136. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address...

openSUSE Security Update : libsatsolver (libsatsolver-266)

A remotely exploitable code execution vulnerability via shell metachars has been fixed in libzypp. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsatsolver-266. The text description of thi...

StoneTrip Ston3D Standalone Player Code Execution Vulnerability (Linux)

This host is installed with StoneTrip Ston3D Standalone Player and is prone to Code Execution vulnerability. OpenVAS Vulnerability Test $Id: gbston3dprdtscodeexecvulnlin.nasl 4869 2016-12-29 11:01:45Z teissa $ StoneTrip Ston3D Standalone Player Code Execution Vulnerability Linux Authors: Nikita M...