8687 matches found
CVE-2012-0776
The installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors...
CVE-2012-0776
The installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors...
CVE-2012-0776
The installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors...
CVE-2012-0776
CVE-2012-0776 affects Adobe Reader 9.x (before 9.5.1) and 10.x (before 10.1.3); the vulnerability lies in the installer bypassing access restrictions, enabling arbitrary code execution. Public sources (OpenVAS/NVD-derived advisories) also note concurrent issues across Acrobat/Reader on Windows, m...
CVE-2012-0776: Undefined Security Weakness
The installer in Adobe Reader 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to bypass intended access restrictions and execute arbitrary code via unspecified vectors...
2X Client for RDP 10.1.1204 ClientSystem Class ActiveX Control Download
Exploit for windows platform in category remote exploits 2X Client for RDP 10.1.1204 ClientSystem Class ActiveX Control TuxClientSystem.dll InstallClient Download and Execute Vulnerability tested against: Microsoft Windows Vista SP2 Microsoft Windows Server 2003 r2 sp2 Internet Explorer 8 vendor...
2X Client For RDP 10.1.1204 Download / Execute
2X Client for RDP 10.1.1204 ClientSystem Class ActiveX Control TuxClientSystem.dll InstallClient Download and Execute Vulnerability tested against: Microsoft Windows Vista SP2 Microsoft Windows Server 2003 r2 sp2 Internet Explorer 8 vendor description: "2X Software is a global leader of desktop a...
Debian DSA-2408-1 : php5 - several vulnerabilities
Several vulnerabilities have been discovered in PHP, the web scripting language. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2011-1072 It was discovered that insecure handling of temporary files in the PEAR installer could lead to denial of service. -...
DSA-2408-1 php5 - several
Bulletin has no description...
Microsoft Office ClickOnce Unsafe Execution
Added: 01/16/2012 CVE: CVE-2012-0013 BID: 51284 OSVDB: 78207 Background ClickOnce is a deployment technology that allows developers to create self-updating Windows-based applications that can be installed and run with minimal user interaction. A ClickOnce application is any Windows Presentation...
Debian DSA-2365-1 : dtc - several vulnerabilities
Ansgar Burchardt, Mike O'Connor and Philipp Kern discovered multiple vulnerabilities in DTC, a web control panel for admin and accounting hosting services : - CVE-2011-3195 A possible shell insertion has been found in the mailing list handling. - CVE-2011-3196 Unix rights for the apache2.conf wer...
Windows ClickOnce Application Installer Remote Code Execution Vulnerability (2584146)
This host is missing an important security update according to Microsoft Bulletin MS12-005. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Nmap 5.61TEST4 released with Web Spidering Feature !
Nmap 5.61TEST4 released with Web Spidering Feature ! Nmap release today an interesting version nmap 5.61TEST4 with number of interesting features. Also, to improve the user experience, the Windows installer nowinstalls various browser toolbars, search engine redirectors, andassociated adware. a...
0A29-11-4 : Privilege escalation vulnerabilities in Nagios XI installer < 2011R1.9
================ Privilege escalation vulnerabilities in Nagios XI installer 2011R1.9 Author: 0a29406d9794e4f9b30b3c5d6702c708 twitter.com/0a29 - 0a29.blogspot.com - GMail 0a2940 ================ Description: ================ Multiple privilege escalations exist within Nagios XI installer. Tested...
Mandriva Linux Security Advisory : php-pear (MDVSA-2011:187)
A vulnerability has been discovered and corrected in php-pear : The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories, a different...
Nagios XI Privilege Escalation
================ Privilege escalation vulnerabilities in Nagios XI installer /dev/null; then cd /tmp rpm -Uvh epel-release.rpm ----- Vulnerability 2: Arbitrary crontab intallation ----- Files: install-crontab-root install-crontab-nagios uninstall-crontab-nagios A malicious user can exploit a race...
Cnet Apologizes for Nmap Adware Bundling
Officials at Cnet’s Download.com site have issued a statement apologizing for bundling the popular open source Nmap security audit application with adware that changed users’ search engine and home page to Microsoft properties. Fyodor, the author of Nmap, raised the issue earlier this week, sayin...
php-pear: symlink vulnerability in PEAR installer
The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories, a different vulnerability than CVE-2007-2519...
Windows Kernel Zero Day Vulnerability Found in Duqu Installer
Windows Kernel Zero Day Vulnerability Found in Duqu Installer Duqu malware attack exploited a zero-day vulnerability in the Windows kernel, according to security researchers tracking the Stuxnet-like cyber-surveillance Trojan. The vulnerability has since been reported to Microsoft and Microsoft i...