75 matches found
chromium: information leakage
The PDF viewer does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and outofprocessinstance.cc...
CVE-2015-1302
The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and outofprocessinstance.cc...
CVE-2015-1302
The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and outofprocessinstance.cc...
Mac OS X <= 10.4.8 pppd Plugin Loading Privilege Escalation Exploit
No description provided by source. Mac OS X = 10.4.8 pppd Plugin Loading Privilege Escalation Exploit http://www.exploit-db.com/sploits/05252007-osxpppd.tar milw0rm.com 2007-05-25...
Code injection
Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the-middle attackers to execute plugin code by modifying the client-server data stream...
Google Chrome < 17.0.963.79 Memory Corruption Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 17.0.963.79 and is, therefore, affected by memory corruption vulnerabilities related to plugin loading and GPU processing. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Trapeze Service Shell - Admin Service Accessible
The remote web server is a Trapeze Service Shell, the application server component included with various products from Trapeze Software, Inc., such as their traveller information systems for providing public bus and train route information. The remote Trapeze Service Shell has not been securely...
GLSA-200807-13 : VLC: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200807-13 VLC: Multiple vulnerabilities Remi Denis-Courmont reported that VLC loads plugins from the current working directory in an unsafe manner CVE-2008-2147. Alin Rad Pop Secunia Research reported an integer overflow error in...
VLC: Multiple vulnerabilities
Background VLC is a cross-platform media player and streaming server. Description Remi Denis-Courmont reported that VLC loads plugins from the current working directory in an unsafe manner CVE-2008-2147. Alin Rad Pop Secunia Research reported an integer overflow error in the Open function in the...
CVE-2008-2830
Open Scripting Architecture in Apple Mac OS X 10.4.11 and 10.5.4, and some other 10.4 and 10.5 versions, does not properly restrict the loading of scripting addition plugins, which allows local users to gain privileges via scripting addition commands to a privileged application, as originally...
Mac OS X <= 10.4.8 pppd Plugin Loading Privilege Escalation Exploit
No description provided by source. Mac OS X = 10.4.8 pppd Plugin Loading Privilege Escalation Exploit http://www.milw0rm.com/sploits/05252007-osxpppd.tar sebug.net...
Apple Mac OSX 10.4.8 - pppd Plugin Loading Privilege Escalation
Mac OS X = 10.4.8 pppd Plugin Loading Privilege Escalation Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/3985.tar 05252007-osxpppd.tar milw0rm.com 2007-05-25...
Mac OS X <= 10.4.8 pppd Plugin Loading Privilege Escalation Exploit
Exploit for macOS platform in category local exploits =================================================================== Mac OS X = 10.4.8 pppd Plugin Loading Privilege Escalation Exploit =================================================================== back: http://inj3ct0r.com/sploits/469.ra...
Apple Mac OSX 10.4.8 - pppd Plugin Loading Privilege Escalation
Apple Mac OSX 10.4.8 - pppd Plugin Loading Privilege Escalation Mac OS X = 10.4.8 pppd Plugin Loading Privilege Escalation Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/3985.tar 05252007-osxpppd.tar milw0rm.com 2007-05-25...
security flaw
The 1 libsasl and 2 libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASLPATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASLPATH to point to malicious programs...