CVE-2013-4677

Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions Everyone: Read and Everyone: Change for backup data files, which allows local users to obtain sensitive information or modify the outcome of a restore via direct access to these files...

CVE-2013-4677

Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions Everyone: Read and Everyone: Change for backup data files, which allows local users to obtain sensitive information or modify the outcome of a restore via direct access to these files...

Microsoft Internet Explorer Multiple Use After Free Vulnerabilities (2829530)

This host is missing a critical security update according to Microsoft Bulletin MS13-037. OpenVAS Vulnerability Test $Id: secpodms13-037.nasl 6086 2017-05-09 09:03:30Z teissa $ Microsoft Internet Explorer Multiple Use After Free Vulnerabilities 2829530 Authors: Thanga Prakash S Copyright: Copyrig...

Microsoft Internet Explorer Multiple Use After Free Vulnerabilities (2829530)

This host is missing a critical security update according to Microsoft Bulletin MS13-037. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Adobe Photoshop Camera Raw缓冲区溢出远程代码执行漏洞

BUGTRAQ ID: 56922 CVECAN ID: CVE-2012-5679 Photoshop Camera Raw 软件可以解析相机原始数据文件，该软件使用有关相机的信息以及图像元数据来构建和处理彩色图像。 Adobe Photoshop Camera Raw 7.3之前版本在实现上存在缓冲区溢出漏洞，远程攻击者可利用此漏洞执行任意代码。 0 Adobe Photoshop Camera Raw = 7.3 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（apsb12-28）以及相应补丁: apsb12-28：Security update...

CVE-2012-5901

CVE-2012-5901 affects DFLabs PTK 1.0.5, where data files are stored with predictable names under the web document root. The root cause is insufficient access control, enabling remote attackers to read logs, images, or reports by directly requesting files in the (1) log, (2) images, or (3) report ...

UBUNTU-CVE-2012-1148

Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service memory consumption via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities...

Cytel Studio CY3 File Processing Buffer Overflow

Added: 12/05/2011 BID: 49924 OSVDB: 75991 Background Cytel Inc. provides clinical trial design services and specialized statistical applications primarily for the biotech and pharmaceutical research markets. StatXact is a statistical software package based on the exact branch of statistics used b...

HP Network Node Manager i weak permissions

Weak permissions for log and data files...

[security bulletin] HPSBMA02672 SSRT100485 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Local Read and Write Access to Data and Log Files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02821425 Version: 1 HPSBMA02672 SSRT100485 rev.1 - HP Network Node Manager i NNMi for HP-UX, Linux, Solaris, and Windows, Local Read and Write Access to Data and Log Files NOTICE: The information...

[SECURITY] Fedora 13 Update: maniadrive-data-1.2-5.fc13

Data files for maniadrive, a 3D stunt driving game. Notice this package does not include the original ManiaDrive soundtrack as the original soundtrack is licensed under a CC BY-NC-SA license, which is not acceptable to Fedora. A replacement soundtrack is available in the maniadrive-music package...

SuSE 11 / 11.1 Security Update : MySQL (SAT Patch Numbers 3220 / 3243)

The following bugs have been fixed : - local users could delete data files for tables of other users. CVE-2010-1626 - authenticated users could gather information for tables they should not have access to. CVE-2010-1849 - authenticated users could crash mysqld. CVE-2010-1848 - authenticated users...

openSUSE Security Update : libmysqlclient-devel (openSUSE-SU-2010:0730-1)

local users could delete data files for tables of other users CVE-2010-1626. - authenticated users could gather information for tables they should not have access to CVE-2010-1849 - authenticated users could crash mysqld CVE-2010-1848 - authenticated users could potentially execute arbitrary code...

mysql: table destruction via DATA/INDEX DIRECTORY directives using symlinks

MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247...

Fedora Core 10 FEDORA-2009-12652 (cups)

The remote host is missing an update to cups announced via advisory FEDORA-2009-12652. OpenVAS Vulnerability Test $Id: fcore200912652.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12652 cups Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...

Fedora Core 11 FEDORA-2009-11034 (alienarena-data)

The remote host is missing an update to alienarena-data announced via advisory FEDORA-2009-11034. OpenVAS Vulnerability Test $Id: fcore200911034.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-11034 alienarena-data Authors: Thomas Reinke Copyright:...

[SECURITY] Fedora 10 Update: alienarena-data-20091102-1.fc10

Data files audio, maps, etc for Alien Arena 2009...

[SECURITY] Fedora 11 Update: alienarena-data-20091102-1.fc11

Data files audio, maps, etc for Alien Arena 2009...

TxtBlog 1.0 Alpha - Local File Inclusion

TxtBlog 1.0 Alpha - Local File Inclusion ============================================================ TxtBlog index.php m Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

GLSA-200810-01 : WordNet: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200810-01 WordNet: Execution of arbitrary code Jukka Ruohonen initially reported a boundary error within the searchwn function in src/wn.c. A thorough investigation by the oCERT team revealed several other vulnerabilities in...