196 matches found
Oracle Critical Patch Update Advisory - July 2010
Oracle Critical Patch Update Advisory - July 2010 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Critical Patch Updates are...
Installshield 2009 15.0.0.53 Premier - ISWiAutomation15.dll ActiveX Arbitrary File Overwrite
Installshield 2009 15.0.0.53 Premier - ISWiAutomation15.dll ActiveX Arbitrary File Overwrite source: https://www.securityfocus.com/bid/43857/info InstallShield 2009 Premier ActiveX control is prone to an arbitrary-file-overwrite vulnerability. Attackers can overwrite arbitrary files on the victim...
Installshield 2009 15.0.0.53 Premier - 'ISWiAutomation15.dll' ActiveX Arbitrary File Overwrite
source: https://www.securityfocus.com/bid/43857/info InstallShield 2009 Premier ActiveX control is prone to an arbitrary-file-overwrite vulnerability. Attackers can overwrite arbitrary files on the victim's computer in the context of the vulnerable application typically Internet Explorer using th...
Unfixed XSS vulnerability at bookings.premierinn.com
Security researcher systemmeltdown, has submitted on 09/01/2009 a cross-site-scripting XSS vulnerability affecting bookings.premierinn.com, which at the time of submission ranked 21952 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2009...
CVE-2007-4375
The administrative interface aka DkService.exe in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to 1 obtain sensitive information process memory contents, as demonstrated by an attack th...
CVE-2007-4375
The administrative interface aka DkService.exe in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versions exposes a memory comparison function via RPC over TCP, which allows remote attackers to 1 obtain sensitive information process memory contents, as demonstrated by an attack th...
Oracle Critical Patch Update - April 2007
Oracle Critical Patch Update - April 2007 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. It also includes non-security fixes that are required because of interdependencies by those security patches. Due to the threat posed by a successful...
CVE-2006-3823
SQL injection vulnerability in index.php in GeodesicSolutions 1 GeoAuctions Premier 2.0.3 and 2 GeoClassifieds Basic 2.0.3 allows remote attackers to execute arbitrary SQL commands via the b parameter...
CVE-2006-3823: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in GeodesicSolutions 1 GeoAuctions Premier 2.0.3 and 2 GeoClassifieds Basic 2.0.3 allows remote attackers to execute arbitrary SQL commands via the b parameter...
CVE-2006-3823
CVE-2006-3823 describes an SQL injection in GeodesicSolutions’ index.php affecting two products: GeoAuctions Premier 2.0.3 and GeoClassifieds Basic 2.0.3. The vulnerability occurs when exploiting the b parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. According ...
CVE-2006-0166
Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindNext Windows APIs and allows remote attackers to hide arbitrary files from virus scanners and other...
CVE-2006-0166
CVE-2006-0166 affects Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006. The issue involves temporary copies of files being stored in the Norton Protected Recycle Bin (NProtect) directory, which is hidden from the FindFirst/FindNext Windows APIs. This visibility weakness could all...
CVE-2006-0166: Undefined Security Weakness
Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindNext Windows APIs and allows remote attackers to hide arbitrary files from virus scanners and other...
CVE-2004-2629: Undefined Security Weakness
Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express when used with H.323 conferencing endpoints, Click to Meet Premier, Conference Server, and V-Gate allow remote attackers to cause a denial of service, as demonstrated by the...
