814 matches found
CVE-2012-6598
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 33080...
CVE-2012-6604
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 35249...
CVE-2012-6597
The CVE affects Palo Alto Networks PAN-OS pre-3.1.11 and pre-4.0.9 (specifically PAN-OS 3.1.x before 3.1.11 and 4.0.x before 4.0.9). The underlying issue is a denial-of-service via a crafted command sent to the CLI, exploitable by remote authenticated users to crash the management server. Remedia...
CVE-2012-6601
PAN-OS < 3.1.12, < 4.0.10 (4.0.x) and
CVE-2012-6602
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Ref ID 30122...
CVE-2013-5663
The App-ID cache feature in Palo Alto Networks PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2 allows remote attackers to bypass intended security policies via crafted requests that trigger invalid caching, as demonstrated by incorrect identification of HTTP traffic as SIP...
CVE-2013-5663
The CVE-2013-5663 issue affects Palo Alto Networks PAN-OS App-ID cache. Affected versions are PAN-OS before 4.0.14, 4.1.x before 4.1.11, and 5.0.x before 5.0.2. The flaw allows remote attackers to bypass security policies by sending crafted requests that trigger invalid caching, demonstrated by i...
Microsoft Internet Explorer Ref Counting释放后重用远程代码执行漏洞(MS12-077)
BUGTRAQ ID: 56830 CVECAN ID: CVE-2012-4787 Microsoft Internet Explorer是微软公司推出的一款网页浏览器,使用相当广泛。 Microsoft Internet Explorer 6、7、8、9、10在处理恶意HTML内容时,Ref Counting存在错误的内存操作,通过引诱用户浏览恶意网站,未经身份验证的远程攻击者可利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft Internet...
CVE-2012-4787
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that 1 was not properly initialized or 2 is deleted, aka "Improper Ref Counting Use After Free Vulnerability."...
Microsoft Internet Explorer Multiple Vulnerabilities (2761465)
This host is missing a critical security update according to Microsoft Bulletin MS12-077. OpenVAS Vulnerability Test $Id: secpodms12-077.nasl 5912 2017-04-10 09:01:51Z teissa $ Microsoft Internet Explorer Multiple Vulnerabilities 2761465 Authors: Rachana Shetty Copyright: Copyright c 2012 SecPod,...
CVE-2012-4787: Use After Free
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that 1 was not properly initialized or 2 is deleted, aka "Improper Ref Counting Use After Free Vulnerability."...
CVE-2011-5162
GOM Player 2.1.33.5071 is affected by a stack-based buffer overflow in the ASX ref href handling, allowing user‑assisted remote code execution via a crafted ASX file with a long URI. The issue is described as a regression from CVE-2007-0707. Affected component: parsing of the ASX file’s ref href ...
PT-2012-2140
Name of the Vulnerable Software and Affected Versions GOM Player version 2.1.33.5071 Description A stack-based buffer overflow issue allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a long URI in the ref href tag. This issue exists due to a regression...
CVE-2011-5162: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a long URI in the "ref href" tag. NOTE: this issue exists because of a CVE-2007-0707 regression...
Unable to process the workload: your license has been exceeded
Challenge A Veeam Backup & Replication job fails with either of the following errors: Error: Not enough licenses. Error: Unable to process the workload: your license has been exceeded Cause The limits of the installed license have been exceeded. Solution Information regarding Veeam Backup &...
MS11-083 Denial Of Service
!/bin/sh cat winnuke2011.c include include include include include include include include include include include int port; int active = 0; pthreadmutext mutexactive; void sendpacketsvoid ptr; int mainint argc, char argv pthreadt thread; int iret,lthreads; pidt pid; printf"+ MS11-083 DoS/PoC...
PT-2011-1831
Name of the Vulnerable Software and Affected Versions Member Management System version 4.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the REF URL parameter in the admin/index.a...
CVE-2010-4851: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote attackers to execute arbitrary SQL commands via the 1 ref or 2 pollid parameter to index.php, or the 3 country parameter to createaccount.php...
PT-2011-1786
Name of the Vulnerable Software and Affected Versions Eclime version 1.1.2b Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the ref or poll id parameter to "index.php", or the country parameter to "create account.php". Recommendations For...
Maxthon Browser 3.0.20.1000 Denial Of Service
Exploit Title: Maxthon Browser v3.0.20.1000 .ref .replace DOS Date: January 30 2011 Author: Carlos Mario Penagos Hollmann Software Link: http://dl.maxthon.com/mx3/mx3.0.20.3000.exe Version: v3.0.20.1000 Tested on: Windows xp sp3 ,windows 7 ,linux running on VMware Fusion 3.1 and VirtualBox 3.2.8...