Stack overflow

Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows user-assisted attackers to execute arbitrary code via a crafted .AMHH file...

Stack overflow

Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user-assisted attackers to execute arbitrary code via a crafted .NKNT file...

CVE-2009-1640

Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Macintosh 4.04 allows user-assisted attackers to execute arbitrary code via a crafted .AMHH file...

CVE-2009-1639

CVE-2009-1639 affects Nucleus Data Recovery Kernel Recovery for Novell 4.03. The connected documents describe a stack-based buffer overflow in this product that can be triggered by a crafted .NKNT file, enabling user‑assisted arbitrary code execution. The vulnerability impact is described as code...

CVE-2009-1639

Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user-assisted attackers to execute arbitrary code via a crafted .NKNT file...

CVE-2009-1640

CVE-2009-1640 affects Nucleus Data Recovery Kernel Recovery for Macintosh v4.04. The vulnerability is a stack-based buffer overflow in the AMHH file handling that can allow a user‑assisted attacker to execute arbitrary code. The NVD entry shows a high base score (9.3, CVSS2: AV:N/AC:M/Au:N/C:C/I:...

PT-2009-4124 · Nucleus · Nucleus Data Recovery Kernel Recovery For Macintosh

Name of the Vulnerable Software and Affected Versions: Nucleus Data Recovery Kernel Recovery for Macintosh version 4.04 Description: A stack-based buffer overflow issue allows user-assisted attackers to execute arbitrary code via a crafted .AMHH file. Recommendations: For version 4.04, update to ...

PT-2009-4123 · Nucleus · Nucleus Data Recovery Kernel Recovery For Novell

Name of the Vulnerable Software and Affected Versions: Nucleus Data Recovery Kernel Recovery for Novell version 4.03 Description: The issue is a stack-based buffer overflow that allows user-assisted attackers to execute arbitrary code. This is achieved by using a crafted .NKNT file...

Nucleus Kernel Recovery for Mac/Novell缓冲区溢出漏洞

Bugraq ID: 34846 CNCAN ID：CNCAN-2009050702 Nucleus Kernel Recovery是一款数据恢复软件，支持Novell和Mac等平台。 Nucleus Kernel Recovery处理.AMHH文件存在边界错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建恶意的.AMHH文件，诱使用户打开，可触发基于栈的缓冲区溢出，可能导致以应用程序上下文执行任意指令。 0 Nucleus Data Recovery Kernel Recovery for Novell 4.03 Nucleus Data Recovery Kernel...

Directory traversal

Directory traversal vulnerability in the media manager in Nucleus CMS before 3.40 allows remote attackers to read arbitrary files via unknown vectors...

CVE-2009-0929

Directory traversal vulnerability in the media manager in Nucleus CMS before 3.40 allows remote attackers to read arbitrary files via unknown vectors...

CVE-2009-0929

The CVE; Affected software: Nucleus CMS (Media Manager) prior to version 3.40. Issue: directory traversal allows remote attackers to read arbitrary files via unknown vectors. Impact: information disclosure affecting confidentiality (partial). Root cause: vulnerability in the media manager path ha...

CVE-2009-0929

Directory traversal vulnerability in the media manager in Nucleus CMS before 3.40 allows remote attackers to read arbitrary files via unknown vectors...

Nucleus CMS < 3.40 Unspecified Traversal Arbitrary File Access

Binary data 4954.prm...

CVE-2008-4446

Cross-site scripting XSS vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-4446

Cross-site scripting XSS vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-4446

CVE-2008-4446 concerns a cross-site scripting (XSS) vulnerability in Nucleus EUC-JP Japanese Edition. The Nucleus CMS versions affected are v3.31 SP1 EUC-JP and earlier. The underlying issue is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Nucleus EUC-JP Japanese Edition vulnerable to cross-site scripting

Overview Nucleus from The Nucleus Group contains a cross-site scripting vulnerability. According to the developer, it is confirmed that this vulnerability exist in Nucleus EUC-JP only, and Nucleus UTF-8 Japanese Edition and Nucleus English Edition are not affected. For more information, refer to...

JVN#92651529 Nucleus EUC-JP Japanese Edition vulnerable to cross-site scripting

Nucleus is an open source content management system provided by The Nucleus Group. Nucleus EUC-JP Japanese Edition contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the specific web browser. Solution Update the Software Apply the latest update provided b...