868 matches found
WinMount 3.4.1020 Final Commandline Vulnerability
Exploit for windows platform in category local exploits ================================================= WinMount 3.4.1020 Final Commandline Vulnerability ================================================= Exploit Title : Commandline vulnerability Date : 27 Oct 2010 Author : STRELiTZIA Software :...
CVE-2009-4081
Technical details for CVE-2009-4081 are not publicly available in the provided documents; the materials reference CVE-2009-3894 but do not supply affected product/version/root cause for CVE-2009-4081. Monitor for updates.
Wind news site content management system explosive path vulnerability-vulnerability warning-the black bar safety net
Wind news site content management system the latest burst path vulnerability in! Directly burst the absolute path Methods: Directly in the URL added on the Admin/User/getGroupDebate. asp to it!!!! Microsoft VBScript runtime error-Error '800a01f4' Variable is undefined: 'Conn'...
CVE-2009-2761
CVE-2009-2761: Unquoted Windows search path vulnerability in Avira AntiVir family (AntiVir, Premium, Premium Security Suite, Professional) allows local privilege escalation via a malicious antivir.exe in C:\Program Files\avira, caused by an unquoted path in the scheduler (sched.exe). Affected ver...
CVE-2009-0667
Untrusted search path vulnerability in Agent/Backend.pm in Ocsinventory-Agent before 0.0.9.3, and 1.x before 1.0.1, in OCS Inventory allows local users to gain privileges via a Trojan horse Perl module in an arbitrary directory...
CVE-2008-6558
Untrusted search path vulnerability in ReliantHA 1.1.4 (SCO UnixWare 7.1.4) affects hvdisp and rcvm. Local users can gain root privileges by setting RELIANT_PATH to a malicious bin/hvenv, exploiting an untrusted PATH search. Affected components: RELIANT_PATH environment variable usage in hvdisp/r...
GLSA-200903-05 : PDFjam: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200903-05 PDFjam: Multiple vulnerabilities Martin Vaeth reported multiple untrusted search path vulnerabilities CVE-2008-5843. Marcus Meissner of the SUSE Security Team reported that temporary files are created with a predictable...
Fedora Core 9 FEDORA-2009-1189 (gedit)
The remote host is missing an update to gedit announced via advisory FEDORA-2009-1189. OpenVAS Vulnerability Test $Id: fcore20091189.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1189 gedit Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Design/Logic Flaw
Untrusted search path vulnerability in src/ifpython.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySysSetArgv function CVE-2008-5983, as demonstrated ...
CVE-2008-5987
The CVE-2008-5987 entry concerns Eye of GNOME (eog) up to at least version 2.22.3, with a vulnerability in the Python interface. The issue arises from an untrusted search path: a Trojan horse Python file in the current working directory can be executed, due to the PySys_SetArgv function. This loc...
CVE-2008-2378
The CVE-2008-2378 issue concerns the hf HF kernel component (hfkernel) used by the hf package. The vulnerability is a local untrusted-search-path flaw that could allow privilege escalation via a Trojan horse killall executable found in a PATH directory, related to improper handling of the -k opti...
Design/Logic Flaw
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH...
CVE-2008-4815
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH...
Gentoo Security Advisory GLSA 200810-02 (portage)
The remote host is missing updates announced in advisory GLSA 200810-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2006-7234
CVE-2006-7234 affects Lynx prior to 2.8.6rel.4 and is an Untrusted search path vulnerability that allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory. The MiracleLinux OSS advisories list this CVE and reference Lynx 2.8...
CVE-2008-3357
Untrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 aka 9.0.4, and Ingres 2006 release 2 aka 9.1.0 on Linux and HP-UX allows local users to gain privileges via a crafted shared library, related to a "pointer overwrite vulnerability."...
Design/Logic Flaw
Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability sblim libraries before 1-13a.el46.1 in Red Hat Enterprise Linux RHEL 4, and before 1-31.el52.1 in RHEL 5, allows local users to gain privileges via a malicious library...
CVE-2008-1951
Untrusted search path vulnerability in a certain Red Hat build script for Standards Based Linux Instrumentation for Manageability sblim libraries before 1-13a.el46.1 in Red Hat Enterprise Linux RHEL 4, and before 1-31.el52.1 in RHEL 5, allows local users to gain privileges via a malicious library...
CVE-2008-1951
CVE-2008-1951 is an untrusted search path vulnerability in sblim libraries on Red Hat Enterprise Linux: an attacker could place a malicious libc.so in a directory in the RPATH under /var/tmp, enabling local privilege escalation. The issue is demonstrated via a malicious libc.so used by tog-pegasu...
CVE-2008-2366
OpenOffice.org on Red Hat Enterprise Linux 3/4 is affected by CVE-2008-2366 due to an insecure relative RPATH in the OpenOffice memory allocator path, allowing local privilege escalation via a malicious library in the user’s current working directory. The issue is documented in Red Hat RHSA-2008:...