4753 matches found
Server: Users can mount the local filesystem
Due to an insufficient permission check authenticated users are able to access preview pictures of others users. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...
ownCloud Preview Picture Access Authentication Bypass Vulnerability
ownCloud is prone to unauthorized picture preview access. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if...
CVE-2014-4594
Cross-site scripting XSS vulnerability in index.php in the WordPress Responsive Preview plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in the WordPress Responsive Preview plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter...
CVE-2014-4594
The CVE-2014-4594 entry concerns the WordPress Responsive Preview plugin for WordPress, affected in versions before 1.2. The vulnerability is an XSS in index.php triggered via the url parameter, allowing remote attackers to inject arbitrary web script or HTML. The risk description is supported by...
Blizzard Entertainment StarCraft Brood War 1.15.1 - Minimap Preview Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25478/info StarCraft Brood War is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. Attackers can exploit this issue to crash the affected application, denyi...
Apple Mac OS X 10.x - LZWDecodeVector (.tiff) Overflow
No description provided by source. source: http://www.securityfocus.com/bid/17634/info Apple Mac OS X is reported prone to multiple security vulnerabilities. These issue affect Mac OS X and various applications including Safari, Preview, Finder, QuickTime, and BOMArchiveHelper. A remote attacker...
Publish-It 3.6d - (.pui) SEH Buffer Overflow
No description provided by source. !/usr/bin ruby env Exploit Title: Publish-It 3.6d - SEH Buffer Overflow Date: 8/2/2014 Exploit Author: Muhamad Fadzil Ramli mind1355atgmail.com Vendor HomePage: https://www.postersw.com Software Link: https://www.postersw.com/publish3.exe Version App: v3.6d Test...
Sony Playstation 3 (PS3) 4.31 - Save Game Preview SFO File Handling Local Command Execution
No description provided by source...
Splunk <= 4.3.3 Arbitrary File Read
No description provided by source. Exploit Title: Splunk = 4.3.3 Reading Arbitrary Files Contents Date: 09/03/2012 Exploit Author: Marcio Almeida [email protected] Vendor Homepage: http://www.splunk.com/ Software Link: http://www.splunk.com/download?r=header Version: 4.3.3 and priors...
Apple Mac OS X 10.x .zip Parsing BOMStackPop() Function Overflow
No description provided by source. source: http://www.securityfocus.com/bid/17634/info Apple Mac OS X is reported prone to multiple security vulnerabilities. These issue affect Mac OS X and various applications including Safari, Preview, Finder, QuickTime, and BOMArchiveHelper. A remote attacker...
Windows Explorer 6.0.2900.5512 (Shmedia.dll 6.0.2900.5512) AVI Preview DoS PoC
No description provided by source. done by BraniX [email protected] www.hackers.org.pl found: 2011.03.27 published: 2011.03.29 tested on: Windows XP SP3 Home Edition tested on: Windows XP SP3 Professional Edition App: Windows Explorer 6.0.2900.5512 Shmedia.dll 6.0.2900.5512 App Url:...
WordPress Responsive Preview Plugin <= 1.1 - XSS
Because of this vulnerability in index.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...
openSUSE Security Update : opera (openSUSE-SU-2010:0540-1)
This update of opera fixes the following vulnerabilities : - CVE-2010-2576: CVSS v2 Base Score: 6.8 CWE-94: unexpected changes in tab focus could be used to run programs from the Internet, as reported by Jakob Balle and Sven Krewitt of Secunia - CVE-2010-3019: CVSS v2 Base Score: 9.3 CWE-119: hea...
openSUSE Security Update : chromium (openSUSE-SU-2013:0236-1)
Update to 26.0.1383 - Security fixes bnc798326 - CVE-2012-5145: Use-after-free in SVG layout - CVE-2012-5146: Same origin policy bypass with malformed URL - CVE-2012-5147: Use-after-free in DOM handling - CVE-2012-5148: Missing filename sanitization in hyphenation support - CVE-2012-5149: Integer...
openSUSE Security Update : chromium (openSUSE-SU-2012:1682-1)
Update to 25.0.1362 - Security fixes bnc794075 : - CVE-2012-5139: Use-after-free with visibility events - CVE-2012-5140: Use-after-free in URL loader - CVE-2012-5141: Limit Chromoting client plug-in instantiation. - CVE-2012-5142: Crash in history navigation. - CVE-2012-5143: Integer overflow in...
CVE-2014-3963
ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arbitrary preview pictures via unspecified vectors...
CVE-2014-3963
ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arbitrary preview pictures via unspecified vectors...
