9663 matches found
CVE-2009-4145
nm-connection-editor in NetworkManager NM 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network...
CVE-2009-4145
nm-connection-editor in NetworkManager NM 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network...
PT-2009-4833 · Red Hat · Red Hat Jboss Enterprise Application Platform
Name of the Vulnerable Software and Affected Versions: Red Hat JBoss Enterprise Application Platform versions 4.2.0 through 4.2.0.CP07, 4.2.2GA and earlier, 4.3 versions prior to 4.3.0.CP07, 5.1.0GA and earlier Description: The issue affects the Web Console in the Application Server, allowing...
JBoss Application Server Web Console XSS
Multiple cross-site scripting XSS vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML...
JBoss Application Server Web Console XSS
Multiple cross-site scripting XSS vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML...
JBoss Application Server Web Console XSS
Multiple cross-site scripting XSS vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2.0 before 4.2.0.CP08, 4.2.2GA, 4.3 before 4.3.0.CP07, and 5.1.0GA allow remote attackers to inject arbitrary web script or HTML...
Adobe Photoshop Elements Active File Monitor Service Privilege Escalation (APSB09-17)
Binary data adobeactivefilemonitorsvcprivescalation.nbin...
Adobe Photoshop Elements Active File Monitor Service Local Privilege
Exploit for unknown platform in category local exploits ============================================================================================= Adobe Photoshop Elements Active File Monitor Service Local Privilege Escalation Vulnerability...
Adobe Photoshop Elements Active File Monitor Service Local Privilege Escalation Vulnerability
No description provided by source. To exploit this issue, attackers require local, interactive access to an affected computer. The following example commands are available: sc stop "AdobeActiveFileMonitor8.0" sc config "AdobeActiveFileMonitor8.0" binPath= "cmd /c net user adobe kills /add net...
CVE-2009-2829
Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue...
Sql injection
Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue...
CVE-2009-2829
The CVE-2009-2829 issue affects Apple Mac OS X 10.5.8, where Event Monitor mishandles crafted authentication data sent to the SSH daemon, enabling log-injection that can lead to denial of service when logs are processed by other services. This is tied to a vulnerability in processing XML log docu...
CVE-2009-2829
Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue...
CVE-2009-2829: Undefined Security Weakness
Event Monitor in Apple Mac OS X 10.5.8 does not properly handle crafted authentication data sent to an SSH daemon, which allows remote attackers to cause a denial of service via vectors involving processing of XML log documents by other services, related to a "log injection" issue...
Adobe Photoshop Elements Active File Monitor Service Local Privilege
Exploit for unknown platform in category local exploits =============================================================================== Adobe Photoshop Elements Active File Monitor Service Local Privilege Escalation ===============================================================================...
Adobe Photoshop Elements - Active File Monitor Service Privilege Escalation
To exploit this issue, attackers require local, interactive access to an affected computer. The following example commands are available: sc stop "AdobeActiveFileMonitor8.0" sc config "AdobeActiveFileMonitor8.0" binPath= "cmd /c net user adobe kills /add && net localgroup Administrators adobe /ad...
Adobe Photoshop Elements Active File Monitor Service Local Privilege Escalation
No description provided by source. To exploit this issue, attackers require local, interactive access to an affected computer. The following example commands are available: sc stop "AdobeActiveFileMonitor8.0" sc config "AdobeActiveFileMonitor8.0" binPath= "cmd /c net user adobe kills /add net...
Adobe Photoshop Elements - Active File Monitor Service Privilege Escalation
Adobe Photoshop Elements - Active File Monitor Service Privilege Escalation To exploit this issue, attackers require local, interactive access to an affected computer. The following example commands are available: sc stop "AdobeActiveFileMonitor8.0" sc config "AdobeActiveFileMonitor8.0" binPath=...
SLES9: Security update for OpenLDAP 2
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openldap2-back-meta openldap2-back-monitor openldap2-back-ldap openldap2 openldap2-devel openldap2-back-perl openldap2-client For more information, please...
CVE-2009-3489
Adobe Photoshop Elements 8.0 installs the Adobe Active File Monitor V8 service with an insecure security descriptor, which allows local users to 1 stop the service via the stop command, 2 execute arbitrary commands as SYSTEM by using the config command to modify the binPath variable, or 3 restart...