669 matches found
Fedora Update for heat-jeos FEDORA-2013-9708
Check for the Version of heat-jeos OpenVAS Vulnerability Test Fedora Update for heat-jeos FEDORA-2013-9708 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
[SECURITY] Fedora 18 Update: heat-jeos-9-1.fc18
This is a project for creating Just Enough Operating System images for heat. This project supports the following features: - Creates TDL files for use with oz - Creates compressed qcow2 files for use with libvirt/glance - Registers image files with glance...
CVE-2009-4738
Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile module, allows physically proximate users to bypass the screen lock and execute commands with system privileges via unknown vectors related to "launching...
Design/Logic Flaw
Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile module, allows physically proximate users to bypass the screen lock and execute commands with system privileges via unknown vectors related to "launching...
ATOK for Android issue in the access permissions for the learning information file
Overview ATOK for Android provided by JUST Systems, contains an issue in the access permissions for the learning information file. ATOK for Android provided by JUST Systems contains an issue where another application may access the learning information file which stores user input strings. Gaku...
Mandriva Update for libotr MDVSA-2012:131 (libotr)
Check for the Version of libotr OpenVAS Vulnerability Test Mandriva Update for libotr MDVSA-2012:131 libotr Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Debian DSA-2526-1 : libotr - heap-based buffer overflows
Just Ferguson discovered that libotr, an off-the-record OTR messaging library, can be forced to perform zero-length allocations for heap buffers that are used in base64 decoding routines. An attacker can exploit this flaw by sending crafted messages to an application that is using libotr to perfo...
JVN#95378720: Multiple JustSystems products may insecurely load dynamic libraries
Multiple JustSystems products contain an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. Impact Arbitrary code may be executed with the privileges of the running application. Solution Update the software Apply the appropriate update according to the...
JVN#09619876: Multiple JustSystems products vulnerable to buffer overflow
Multiple products provided by JustSystems Corporation contain a buffer overflow vulnerability due to improper handling of image files. Impact If this vulnerability is exploited, a system may be crashed or arbitrary code may be executed. Solution Update the Software Apply the appropriate update...
PT-2011-3007 · Microsoft · .Net Framework
Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 3.5 Gold and SP1 through 4.0 Description: The issue allows context-dependent attackers to bypass intended access restrictions and execute arbitrary code by leveraging a crafted application, such as a crafted...
WebKit: multiple vulnerabilities in WebKitGTK
WebKit in Apple Safari before 5.0.1 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.1 on Mac OS X 10.4; and webkitgtk before 1.2.6; does not properly handle just-in-time JIT compiled JavaScript stubs, which allows remote attackers to execute arbitrary code or cause a denial of service...
Code injection
Unspecified vulnerability in JustSystems Ichitaro 2004 through 2009, Ichitaro Government 2006 through 2009, and Just School 2008 and 2009 allows remote attackers to execute arbitrary code via unknown vectors related to "product character attribute processing" for a document...
JVN#17293765 Ichitaro series vulnerable to arbitrary code execution
The "Ichitaro" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution. Impact When opening a specially crafted file locally or through a website, an attacker may be able to execute arbitrary code. Solution Update the software...
VulnCheck KEV: CVE-2009-2477
js/src/jstracer.cpp in the Just-in-time JIT JavaScript compiler aka TraceMonkey in Mozilla Firefox 3.5 before 3.5.1 allows remote attackers to execute arbitrary code via certain use of the escape function that triggers access to uninitialized memory locations, as originally demonstrated by...
JAG (Just Another Guestbook) Detection (HTTP)
HTTP based detection of Just Another Guestbook JAG. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-0665
CVE-2010-0665 relates to JAG (Just Another Guestbook) 1.14. The issue is an information disclosure due to insufficient access control: an attacker can directly request jag/database.sql from the web root to obtain sensitive data. The NVD entry cites a base score of 5.0 (Medium) with network attack...
WAR-FTPD 1.65 Denial Of Service
WAR-FTPD 1.65 MKD & CD requests Remote Denial of Service exploited by opt!x hacker mail: [email protected] greetz to his0k4 about : http://securityreason.com/exploitalert/6971 you have to connect to target server from cmd like that: i sended it with perl and python scripts but it's not working because i...
Unfixed XSS vulnerability at just-ping.com
Security researcher CCC, has submitted on 06/06/2008 a cross-site-scripting XSS vulnerability affecting just-ping.com, which at the time of submission ranked 126234 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is currently...
Sql injection
Multiple SQL injection vulnerabilities in auth.php in Just For Fun Network Management System JFFNMS 0.8.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 user and 2 pass parameters...