58 matches found
MS14-009: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: February 11, 2014
MS14-009: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: February 11, 2014 View products that this article applies to. Introduction This update resolves vulnerabilities that could allow elevation of privilege if a user goes to a specially...
Thunderstone TEXIS 3.0 'texis.exe' Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7105/info Thunderstone TEXIS is prone to an information-disclosure vulnerability. Under certain circumstances, an attacker may pass command-line switches as URI parameters to the TEXIS executable. This action may cause th...
openSUSE Security Update : postgresql91 (openSUSE-SU-2013:0627-1)
postgresql was updated to version 9.1.9 bnc812525 : - CVE-2013-1899: Fix insecure parsing of server command-line switches. A connection request containing a database name that begins with '-' could be crafted to damage or destroy files within the server's data directory, even if the request is...
MS12-034: Description of the security update for Windows GDI+: May 8, 2012
None None...
PHP < 5.3.13, 5.4.x < 5.4.3 Multiple Vulnerabilities - Active Check
PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.103482"...
GemStone/S buffer overflow
Buffer overflow in /opt/gemstone/sys/stoned on -e and -l command line switches...
Design/Logic Flaw
Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " quote followed by command line switches in a 1 irc:///, 2 irc6:///, 3 ircs:///, or 4 and ircs6:/// URI. NOTE: this might be due to an incomplete fix for...
Google Chrome - 'ChromeHTML://' Remote Parameter Injection
click me milw0rm.com 2008-12-23...
vim-sanitize.txt
Vim: Arbitrary Code Execution in Commands: K, Control-, g 1. SUMMARY Product : Vim -- Vi IMproved Versions : 3.0--current, possibly older Impact : Arbitrary code execution Wherefrom: Local Original : http://www.rdancer.org/vulnerablevim-K.html Insufficient sanitization can lead to Vim executing...
Design/Logic Flaw
Argument injection vulnerability in the URI handler in Skype 2.0..104 and 2.5..0 through 2.5..78 for Windows allows remote authorized attackers to download arbitrary files via a URL that contains certain command-line switches...
CVE-2006-2312
Argument injection vulnerability in the URI handler in Skype 2.0..104 and 2.5..0 through 2.5..78 for Windows allows remote authorized attackers to download arbitrary files via a URL that contains certain command-line switches...
CVE-2006-2312
Argument injection vulnerability in the URI handler in Skype 2.0..104 and 2.5..0 through 2.5..78 for Windows allows remote authorized attackers to download arbitrary files via a URL that contains certain command-line switches...
Thunderstone TEXIS 3.0 - texis.exe Information Disclosure
Thunderstone TEXIS 3.0 - texis.exe Information Disclosure source: https://www.securityfocus.com/bid/7105/info Thunderstone TEXIS is prone to an information-disclosure vulnerability. Under certain circumstances, an attacker may pass command-line switches as URI parameters to the TEXIS executable...
Microsoft Data Access Components (MDAC) 2.1 / Microsoft IIS 3.0/4.0 / Microsoft Index Server 2.0 / Microsoft Site Server Commerce Edition 3.0 i386 MDAC - RDS (1)
source: https://www.securityfocus.com/bid/529/info MDAC Microsoft Data Access Components is a package used to integrate web and database services. It includes a component named RDS Remote Data Services. RDS allows remote access via the internet to database objects through IIS. Both are included i...
Microsoft Support
None None...
Microsoft Support
None None...