Microsoft Internet Explorer 6/7/8 mshtml!CDwnBindInfo对象释放后重用代码执行漏洞

BUGTRAQ ID: 57070 CVECAN ID: CVE-2012-4792 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Internet Explorer在mshtml!CDwnBindInfo对象的处理上存在释放后重用漏洞，远程攻击者可能利用此漏洞通过诱使用户访问恶意网页内容导致执行任意代码控制用户系统。 此漏洞是0day漏洞，目前已被发现用于执行针对性的攻击。 不受影响系统： Microsoft Internet Explorer 9.x Microsoft Internet Explorer 10.x 0 Microsoft...

Microsoft Internet Explorer CButton use-after-free vulnerability

Overview Microsoft Internet Explorer contains a use-after-free vulnerability in the CButton object, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Internet Explorer contains a use-after-free vulnerability in the mshtml...

Patch 1 Release Notes for Veeam ONE 6.5.0.676

Challenge Patch 1 for Veeam ONE 6.5.0.676 resolves a number of issues described in this article. All patches are cumulative, which means that this patch includes all fixes listed below. Cause Prior to applying this patch, make sure you are running Veeam ONE version 6.5.0.676. You can check this...

Adobe Shockwave player provides vulnerable Flash runtime

Overview Adobe Shockwave Player 12.1.1.151 and earlier versions on the Windows and Macintosh operating systems provide a vulnerable version of the Flash runtime. Description Adobe Macromedia Shockwave Player is software that plays active web content developed in Macromedia and Adobe Director...

Adobe Shockwave player vulnerable to downgrading

Overview Adobe Shockwave Player may automatically install a legacy version of the runtime, which can increase the attack surface of systems that have Shockwave installed. Description Adobe Macromedia Shockwave Player is software that plays active web content developed in Macromedia and Adobe...

Directory traversal

Directory traversal vulnerability in the Community Builder Enhanced CBE comcbe component 1.4.8, 1.4.9, and 1.4.10 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tabname parameter in a userProfile action to index.php. NOTE: this can be...

CVE-2010-5280

Directory traversal vulnerability in the Community Builder Enhanced CBE comcbe component 1.4.8, 1.4.9, and 1.4.10 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tabname parameter in a userProfile action to index.php. NOTE: this can be...

CVE-2010-5280

Directory traversal vulnerability in the Community Builder Enhanced CBE comcbe component 1.4.8, 1.4.9, and 1.4.10 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tabname parameter in a userProfile action to index.php. NOTE: this can be...

CVE-2010-5280

The CVE-2010-5280 entry describes a directory traversal (Local File Inclusion) in Joomla!’s Community Builder Enhanced (CBE) component (com_cbe) versions 1.4.8–1.4.10. The vulnerability allows remote attackers to include and execute arbitrary local files by supplying .. in the tabname parameter o...

PT-2012-1490

Name of the Vulnerable Software and Affected Versions Community Builder Enhanced CBE com cbe component versions 1.4.8 through 1.4.10 for Joomla! Description The issue allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tabname parameter in a "userProfile"...

CVE-2010-5280: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Community Builder Enhanced CBE comcbe component 1.4.8, 1.4.9, and 1.4.10 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tabname parameter in a userProfile action to index.php. NOTE: this can be...

Autonomy Keyview IDOL contains multiple vulnerabilities in file parsers

Overview Autonomy Keyview IDOL contains multiple vulnerabilities in file parsers. These vulnerabilities could allow a remote attacker to execute arbitrary code on an affected system. Description Autonomy Keyview IDOL is a set of libraries that can decode over 1,000 different file formats. The...

CVE-2012-5348

SQL injection vulnerability in MangosWeb Enhanced 3.0.3 allows remote attackers to execute arbitrary SQL commands via the login parameter in a login action to index.php...

Sql injection

SQL injection vulnerability in MangosWeb Enhanced 3.0.3 allows remote attackers to execute arbitrary SQL commands via the login parameter in a login action to index.php...

CVE-2012-5348

SQL injection vulnerability in MangosWeb Enhanced 3.0.3 allows remote attackers to execute arbitrary SQL commands via the login parameter in a login action to index.php...

CVE-2012-5348

CVE-2012-5348 affects MangosWeb Enhanced 3.0.3. The vulnerability is an SQL injection in the login parameter of the login action to index.php, allowing remote execution of arbitrary SQL. It is network-exposed with no authentication and no user interaction required, with a CVSS base score of 6.8 (...

PT-2012-5943

Name of the Vulnerable Software and Affected Versions MangosWeb Enhanced version 3.0.3 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the login parameter in a login action to the "index.php" endpoint. Recommendations F...

CVE-2012-5348: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in MangosWeb Enhanced 3.0.3 allows remote attackers to execute arbitrary SQL commands via the login parameter in a login action to index.php...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Microsoft FixIt Will Address IE Zero-Day Vulnerability

With Internet Explorer users still exposed to as many as four active exploits of a zero-day vulnerability in the browser, Microsoft Tuesday night said it will release a FixIt in the next couple of days that will address the issue. A FixIt is an automated tool provided by Microsoft that diagnoses...