CVE-2011-0012

The SPICE Firefox plug-in spice-xpi 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name...

CVE-2011-0012

SPICE Firefox plug-in spice-xpi (versions 2.4, 2.3, 2.2 and possibly others) is affected by a local-attack vulnerability where a symlink on a predictable usbrdrctl log file name could allow a local user to overwrite arbitrary files. Exploitation leads to file overwrite (no remote access). Remedia...

CVE-2011-1179

CVE-2011-1179 concerns the SPICE Firefox plug-in (spice-xpi) versions 2.4, 2.3, 2.2 and possibly earlier, where a flaw in two plugin files (nsScriptablePeer.cpp and plugin.cpp) can cause multiple uses of an uninitialized pointer. This can lead to denial of service (crash) and potentially arbitrar...

CVE-2011-1179

The SPICE Firefox plug-in spice-xpi 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to 1 plugin/nsScriptablePeer.cpp and 2 plugin/plugin.cpp, which trigger multiple uses of an uninitializ...

CVE-2011-0012

The SPICE Firefox plug-in spice-xpi 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name...

spice security update

CentOS Errata and Security Advisory CESA-2011:0427 An updated spice-xpi package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS ba...

CVE-2011-0187

The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect...

CVE-2011-0187

The plug-in in QuickTime in Apple Mac OS X before 10.6.7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via vectors involving a cross-site redirect...

CVE-2011-0187

CVE-2011-0187 affects Mac OS X via the CoreMedia/QuickTime path: a cross-origin redirect in CoreMedia could bypass Same Origin Policy and allow access to potentially sensitive video data. The public details in connected docs indicate this is tied to OS X Lion/QuickTime/CoreMedia components, with ...

Flash Player < 10.2.153.1 Unspecified Memory Corruption (APSB11-05)

The remote Windows host contains a version of Adobe Flash Player earlier than 10.2.153.1. Such versions are affected by an unspecified memory corruption vulnerability. A remote attacker could exploit this by tricking a user into viewing maliciously crafted SWF content, resulting in arbitrary code...

CVE-2011-1309

The Plug-in component in IBM WebSphere Application Server WAS before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors...

Design/Logic Flaw

The Plug-in component in IBM WebSphere Application Server WAS before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors...

CVE-2011-1309

The Plug-in component in IBM WebSphere Application Server WAS before 7.0.0.15 does not properly handle trace requests, which has unspecified impact and attack vectors...

CVE-2011-1309

Summary: CVE-2011-1309 affects IBM WebSphere Application Server (WAS) 7.x prior to 7.0.0.15, where the Plug-in component does not properly handle trace requests. The impact is described as unspecified in the sources; no explicit exploitation details are provided. The issue is linked to multiple v...

ewebeditor 2.8 commercial version of the backend plug in a word and fix-vulnerability warning-the black bar safety net

Affected version:2.8 Business Edition Attack use:login background, click on Change Password---new password set to 1":eval request"a"’ Set after the success, the access to asp/config. asp file, the word Trojan is written to this file inside the In this paper, ewebeditor commercial version...

RHEL 4 : seamonkey (RHSA-2011:0313)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Discuz entertainment Hall plug-in V1. 0 injection vulnerability and fix-vulnerability warning-the black bar safety net

| Author:0x0F From:0xsec.org Vulnerability Details: sid variable without filtration generated SQL injection. Exploits:http://site/plugin. php? id=huxhall:huxhall&sid=1 You know. KeyWords:inurl:huxhall:huxhall Related companies:Le tour network HappyYux.com Repair Methods:filtration Has a patch:No...

Google Chrome Multiple Denial of Service Vulnerabilities - February 11(Linux)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnfeb11lin.nasl 7015 2017-08-28 11:51:24Z teissa $ Google Chrome Multiple Denial of Service Vulnerabilities - February 11Linux Authors: Madhuri D Copyright: Copyright...

Google Chrome Multiple Denial of Service Vulnerabilities (Feb 2011) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Multiple Denial of Service Vulnerabilities (Feb 2011) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...