LAN Messenger v1.2.28 - Persistent Software Vulnerability

Document Title: =============== LAN Messenger v1.2.28 - Persistent Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id= Release Date: ============= 2012-05-16 Vulnerability Laboratory ID VL-ID: ==================================== 541...

Universal Reader 1.16.740.0 - uread.exe Denial of Service

Universal Reader 1.16.740.0 - uread.exe Denial of Service source: https://www.securityfocus.com/bid/53508/info Universal Reader is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Universa...

Microsoft GDI+ CVE-2012-0167 EMF Image Processing Buffer Overflow Vulnerability

Description Microsoft GDI+ is prone to a remote heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code with the privileges of the...

iGuard Security Access Control Cross Site Scripting Vulnerability

iGuard Security Access Control is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input in the embedded web server. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

[SECURITY] [DSA 2459-2] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2459-2 [email protected] http://www.debian.org/security/ Florian Weimer May 04, 2012 http://www.debian.org/security/faq -...

HDWiki 5.1 control-user.php 远程密码修改漏洞

No description provided by source...

OpenJDK: KeyboardFocusManager focus stealing (AWT, 7110683)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality an...

Microsoft Office Works File Converter (CVE-2012-0177) Heap Based Buffer Overflow Vulnerability

Description Microsoft Office is prone to a remote heap-based buffer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted '.wps' file...

CoreCommerce SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : CoreCommerce SQL injection Date : 22/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : http://www.corecommerce.com Version : 3.0 d0rk : intext:"Powered by Core-Commerce"...

Ricoh DC Software DL-10 FTP Server 1.1.0.6 Buffer Overflow

!/usr/bin/python Exploit Title: Ricoh DC Software DL-10 FTP Server SR10.exe = 1.1.0.6 Remote Buffer Overflow Vulnerability Version: = 1.1.0.6 Date: 2012-02-05 Author: Julien Ahrens Homepage: www.inshell.net Software Link: http://www.ricohpmmc.com Tested on: Windows XP SP3 Professional German Note...

Tiny Server <= 1.1.5 Information Disclosure Vulnerability - Active Check

Tiny Server is prone to arbitrary file disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2423-1] movabletype-opensource security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2423-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2012 http://www.debian.org/security/faq -...

Sockso < 1.5.1 Directory Traversal Vulnerability - Active Check

Sockso is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Zend Server 5.6.0 - Multiple Remote Script Insertion Vulnerabilities

!-- Title: Zend Server 5.6.0 Multiple Remote Script Insertion Vulnerabilities Vendor: Zend Technologies Ltd. Product web page: http://www.zend.com Affected version: Zend Server 5.6.0 Zend Optimizer+ 4.1 Zend Code Tracing 1.0 Zend Data Cache 4.0 Zend Job Queue 4.0 Zend Debugger 5.3 Zend Java Bridg...

Core FTP Server 'Type' Command Remote Denial of Service Vulnerability

This host is running Core FTP Server and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbcoreftpservertypecmddosvuln.nasl 5977 2017-04-19 09:02:22Z teissa $ Core FTP Server 'Type' Command Remote Denial of Service Vulnerability Authors: Sooraj KS Copyright: Copyright...

Oracle Java SE i18n子组件远程安全漏洞

BUGTRAQ ID: 52161 CVE ID: CVE-2012-0507 Sun Java Runtime Environment是一款为JAVA应用程序提供可靠的运行环境的解决方案。 Oracle Java SE中的Java Runtime Environment在实现上存在远程漏洞，可通过多个协议利用，未经验证的攻击者可利用此漏洞影响i18n子组件，导致部分控制受影响组件。此漏洞可影响：7 Update 2、6 Update 30、5.0 Update 33 0 Oracle Sun JRE 1.6.x Oracle Sun JDK 1.6.x 厂商补丁： Oracle...

OpenJDK: incomplete info in the deserialization exception (Serialization, 7110700)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,...

JDK: unspecified vulnerability fixed in 6u31 and 7u3 (2D)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

OpenJDK: mutable repository identifiers (CORBA, 7110704)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via...

Oracle Java SE JRE 2D子组件远程安全漏洞(CVE-2012-0497)

BUGTRAQ ID: 52009 CVE ID: CVE-2012-0497 Sun Java Runtime Environment是一款为JAVA应用程序提供可靠的运行环境的解决方案。 Oracle Java SE中的Java Runtime Environment在实现上存在远程漏洞，可通过多个协议利用，未经验证的攻击者可利用此漏洞影响2D子组件，导致完全控制受影响组件。此漏洞可影响：7 Update 2、6 Update 30 0 Oracle Sun JRE 1.6.x Oracle Sun JDK 1.6.x 厂商补丁： Oracle ------...