6638 matches found
CVE-2012-5122
Removed by vendor...
CVE-2012-5122
Technical details for CVE-2012-5122 are not publicly available in the provided documents. Monitor for updates from primary advisories; current sources list the CVE among Chrome/Chromium vulnerabilities but do not specify affected versions, vectors, or fixes in this bundle.
RedHat Update for xorg-x11-server RHSA-2012:0939-04
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Total Video Player 1.31 .m3u Crash PoC
Exploit for windows platform in category dos / poc Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested...
Total Video Player 1.31 - .m3u Crash (PoC)
Total Video Player 1.31 - .m3u Crash PoC Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested on: Window...
Total Video Player 1.31 - '.m3u' Crash (PoC)
Exploit Title: Total Video Player 1.31 .m3u Crash Poc Date: June 17 2012 Exploit Author: 0dem Vendor Homepage: http://www.effectmatrix.com/ Software Link: http://download.cnet.com/Total-Video-Player/3000-21394-10552696.html Version: V1.31 Tested on: Windows XP SP 3 Description: Total Video Player...
FreeBSD -- Incorrect crypt() hashing
Problem description: There is a programming error in the DES implementation used in crypt when handling input which contains characters that cannot be represented with 7-bit ASCII. When the input contains characters with only the most significant bit set 0x80, that character and all characters...
Concrete CMS 5.5.21 - Multiple Vulnerabilities
Concrete CMS 5.5.21 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/53640/info Concrete CMS is prone to following vulnerabilities because it fails to properly handle user-supplied input. 1. Multiple cross-site scripting vulnerabilities 2. An arbitrary-file-upload vulnerabilit...
CVE-2011-3364
Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-in for GNOME NetworkManager 0.9.1, 0.9.0, 0.8.1, and possibly other versions, when PolicyKit is configured to allow users to create new connections, allows local users to execute...
WordPress Plugin Eventify - Simple Events 1.7.f SQL Injection
WordPress Plugin Eventify - Simple Events 1.7.f SQL Injection Exploit Title: WordPress Eventify - Simple Events plugin getresults$qry;...
WordPress Plugin MM Forms Community 1.2.3 - SQL Injection
WordPress Plugin MM Forms Community 1.2.3 - SQL Injection Exploit Title: WordPress MM Forms Community plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- foreach $REQUEST as $key = $value $SQL="UPDATE wpcontactformsubmitdata SET...
Alice Modem 1111 - rulename Cross-Site Scripting Denial of Service
Alice Modem 1111 - rulename Cross-Site Scripting Denial of Service source: https://www.securityfocus.com/bid/48642/info The Alice Modem is prone to a cross-site scripting vulnerability and a denial-of-service vulnerability because the device fails to properly handle user-supplied input. An attack...
Android Update Adds Protections For Mobile Clickjacking
Google released the latest version of its Android mobile operating system on Monday, adding security features that it says will make it tougher for mobile device users to be subjected to “clickjacking” attacks that trick them into clicking on hidden or disguised user interface elements. The compa...
Mort Bay Jetty 6.0.0 - 7.0.0 Multiple Vulnerabilities - Active Check
Mort Bay Jetty is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty"; ifdescriptio...
SuSE 10 Security Update : Samba (ZYPP Patch Number 6518)
samba's makeconnectionsnum handles certain input incorrectly, which may lead to disclosure of the root directory. CVE-2009-2813 has been assigned to this issue. Additionally an information disclosure vulnerability in mount.cifs has been fixed CVE-2009-2948 as well as a DoS condition. CVE-2009-290...
Irokez CMS 0.7.1 Remote SQL Injection Vulnerability
No description provided by source. +--------------------------------------------------------------------------------------------------------------------+ +--------------------------------------------Irokez 0.7.1 SQL inlection--------------------------------------------+...
KDE Konqueror 4.1.3 link href Memory Leak Exploit
!/usr/bin/perl konqlhrefml.pl KDE Konqueror 4.1.3 'link href' Memory Leak Exploit Jeremy Brown [email protected]/jbrownsec.blogspot.com Software should be able to handle any kind of input and still perform correct operations. Webkit KHTML -- stability-wise, anyways $filename = $ARGV0;...
CVE-2008-5239
xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle a negative and b zero values during unspecified read function calls in inputfile.c, inputnet.c, inputsmb.c, and inputhttp.c, which allows remote attackers to cause a denial of service crash or possibly execute...
DEBIAN-CVE-2008-4641
The DoCommand function in jhead.c in Matthias Wandel jhead 2.84 and earlier allows attackers to execute arbitrary commands via shell metacharacters in unspecified input...
CVE-2008-3910
dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the 1 dnssimpledecode or 2 dnsdecode function, which allows remote attackers to overwrite a buffer and have unspecified other impact...