1848 matches found
Design/Logic Flaw
OpenStack Compute Nova before 2013.1.3 and Havana before havana-2 does not properly enforce the os-flavor-access:ispublic property, which allows remote authenticated users to obtain sensitive information flavor properties, boot arbitrary flavors, and possibly have other unspecified impacts by...
KLA10123 SB vulnerability in Comodo Internet Security
Race conditions were found in Comodo Internet Security. By exploiting this vulnerability malicious users can bypass Defence+. This vulnerability can be exploited from the network at a point related to unknown. Original advisories Comodo release notes Related products Comodo-Internet-Security CVE...
CVE-2012-4331
Multiple unspecified vulnerabilities in SPIP before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 have unknown impact and attack vectors that are not related to cross-site scripting XSS, different vulnerabilities than CVE-2012-2151...
OpenJDK: MediaTracker created Component instances with unnecessary privileges (Swing, 7020198)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availabili...
KLA10058 WLF vulnerability in Altiris Notification Server
An unspecified vulnerability was found in the Symantec products. By exploiting this vulnerability malicious users can download and write local files. This vulnerability can be exploited from the network at a point related to eXpress NS SC Download. Original advisories Symantec security advisory...
KLA10154 WLF vulnerability in FTP Voyager
Directory traversal vulnerability was found in the FTP Voyager. By using this vulnerability spiteful abuser can erite arbitrary files. This vulnerability can be exploited from remote via specially designed filename. Original advisories test results Related products FTP-Voyager CVE list...
CVE-2010-3117
Google Chrome before 5.0.375.127 does not properly implement the notifications feature, which allows remote attackers to cause a denial of service application crash and possibly have unspecified other impact via unknown vectors...
KLA10225 DoS vulnerability in WS FTP
A format string vulnerability was found in WS FTP. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed format string. Original advisories - Exploitation Public exploits exist for this vulnerability...
Visualization Library Multiple Unspecified Vulnerabilities (Linux)
The host is running Visualization Library and is prone to multiple vulnerabilities. Openvas Vulnerability Test $Id: gbvisualizationlibrarymultvulnlin.nasl 5388 2017-02-21 15:13:30Z teissa $ Visualization Library Multiple Unspecified Vulnerabilities Linux Authors: Rachana Shetty Copyright: Copyrig...
Visualization Library Multiple Unspecified Vulnerabilities (Windows)
The host is running Visualization Library and is prone to multiple vulnerabilities. Openvas Vulnerability Test $Id: gbvisualizationlibrarymultvulnwin.nasl 5388 2017-02-21 15:13:30Z teissa $ Visualization Library Multiple Unspecified Vulnerabilities Windows Authors: Rachana Shetty Copyright:...
KLA10042 Critical vulnerability in Adobe Download Manager
Improper request validation at NOS Microsystems getPlus Download Manager was found in Adobe Download Manager. Malicious users can exploit this vulnerability to bypass security and install arbitrary programs via a specially designed download site name. Original advisories Adobe bulletin Related...
Design/Logic Flaw
Multiple unspecified vulnerabilities in HP Performance Insight 5.3 allow remote attackers to have an unknown impact, related to 1 a "Remote exploit" on Windows platforms, and 2 a "Remote preauthentication exploit" on the Windows Server 2003 SP2 platform, as demonstrated by certain modules in...
CVE-2009-1443
Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors...
CentOS 4 : kernel (CESA-2007:0014)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
CVE-2008-6502
Directory traversal vulnerability in Pro Chat Rooms 3.0.2 allows remote authenticated users to select an arbitrary local PHP script as an avatar via a .. dot dot in the avatar parameter, and cause other users to execute this script by using sendData.php to send a message to 1 an individual user o...
Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory Traversal Vulnerability
Exploit for multiple platform in category remote exploits ================================================================== Ruby 1.8.6 Webrick Httpd 1.3.1 Directory Traversal Vulnerability ==================================================================...
CVE-2007-4707
Multiple unspecified vulnerabilities in the Flash media handler in Apple QuickTime before 7.3.1 allow remote attackers to execute arbitrary code or have other unspecified impacts via a crafted QuickTime movie...
CentOS 3 / 4 : ImageMagick (CESA-2007:0015)
Updated ImageMagick packages that correct several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple...