2200 matches found
Microsoft恶意软件保护引擎多个拒绝服务漏洞(MS08-029)
BUGTRAQ ID: 29060,29073 CVECAN ID: CVE-2008-1437,CVE-2008-1438 Microsoft恶意软件保护引擎可为防病毒和反间谍软件客户端提供扫描、监测和清除功能。 Microsoft恶意软件保护引擎处理特制文件的方式中存在拒绝服务漏洞，攻击者可以通过建立特制文件来利用此漏洞，当目标计算机系统接收或Microsoft恶意软件保护引擎扫描到此文件时，就可能导致Microsoft恶意软件保护引擎停止响应和自动重新启动，或耗尽所有磁盘空间 0 Microsoft Windows Live OneCare Microsoft Antigen fo...
Microsoft Security Bulletin MS08-029 – Moderate Vulnerabilities in Microsoft Malware Protection Engine Could Allow Denial of Service (952044)
Microsoft Security Bulletin MS08-029 – Moderate Vulnerabilities in Microsoft Malware Protection Engine Could Allow Denial of Service 952044 Published: May 13, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in the...
Directory traversal
STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management ESM 3.5, and other ESM versions before 3.5.0.82, dynamically creates scripts in a world-writable directory when generating diagnostic reports, which allows local users to gain privileges, as demonstrated by creating a cmd.exe...
Novell ZENworks ESM客户端STEngine.exe本地权限提升漏洞
BUGTRAQ ID: 27146 CVECAN ID: CVE-2007-5665 Novell ZENworks Endpoint Security Management（ESM）的安全客户端允许集中管理防火墙保护策略。 ESM在处理命令的执行时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 当在工作站上安装ZENworks ESM的安全客户端时，就会将STEngine服务设置为在本地SYSTEM帐号下运行。以下可执行程序中实现这个服务： 文件名：STEngine.exe（1,847,296字节） 版本：3.5.0.20...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as identified by Vuln 1 APPS01 in the a Application Install component; 2 APPS09 in the b Oracle Diagnostics Interfaces component; 3 APPS10 in the c Oracle General...
CVE-2006-1880
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as identified by Vuln 1 APPS01 in the a Application Install component; 2 APPS09 in the b Oracle Diagnostics Interfaces component; 3 APPS10 in the c Oracle General...
Oracle Diagnostics Interfaces vulnerability
Overview An unspecified vulnerability in Oracle Diagnostics Interfaces may allow a remote, unauthenticated attacker to compromise system confidentiality and integrity. Description Oracle Diagnostics Interfaces contains a vulnerability. The details of this vulnerability are not clear. However,...
CVE-2006-1880: Undefined Security Weakness
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as identified by Vuln 1 APPS01 in the a Application Install component; 2 APPS09 in the b Oracle Diagnostics Interfaces component; 3 APPS10 in the c Oracle General...
Sql injection
SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...
CVE-2006-1036
Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions."...
Design/Logic Flaw
Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions."...
CVE-2006-1035
Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors...
CVE-2006-1037
SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors...
CVE-2006-1035
Technical details for CVE-2006-1035 are not publicly available in the provided documents. No concrete impact, affected versions, or fixes are described here. Monitor for updates in connected sources.
CVE-2006-1037
The CVE affects the Oracle Diagnostics module (versions up to 2.2) where a SQL injection vulnerability allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. This is evidenced by the CVE entry and corroborating records (NVD/NVD-derived data). The connected documents...
CVE-2006-1036
Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions."...
CVE-2006-1035
Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors...