EUVD-2006-5486

Malware in sbrugna...

CVE-2019-18654

A Cross Site Scripting XSS issue exists in AVG AntiVirus Internet Security Edition 19.3.3084 build 19.3.4241.440 in the Network Notification Popup, allowing an attacker to execute JavaScript code via an SSID Name...

CVE-2019-18654: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS issue exists in AVG AntiVirus Internet Security Edition 19.3.3084 build 19.3.4241.440 in the Network Notification Popup, allowing an attacker to execute JavaScript code via an SSID Name...

PT-2019-15556

Name of the Vulnerable Software and Affected Versions AVG AntiVirus Internet Security Edition version 19.3.3084 build 19.3.4241.440 Description A Cross Site Scripting XSS issue exists in the Network Notification Popup, allowing an attacker to execute JavaScript code via an SSID Name...

CVE-2006-5820

The AOL SuperBuddy ActiveX control (Sb.SuperBuddy.1) contains a vulnerability in the LinkSBIcons() method. This flaw occurs because the method fails to properly validate a user-controlled address argument before dereferencing it, which can allow a remote, unauthenticated attacker to overwrite arb...

CVE-2006-5820: Undefined Security Weakness

The LinkSBIcons method in the SuperBuddy ActiveX control Sb.SuperBuddy.1 in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value...

CVE-2006-5502: Undefined Security Weakness

Heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control YGPPicDownload.dll 9.2.3.0 in America Online AOL 9.0 Security Edition allows remote attackers to execute arbitrary code via the AddPictureNoAlbum method, a different vulnerability than CVE-2006-5501...

CVE-2006-5501: Undefined Security Weakness

Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control YGPPicDownload.dll 9.2.3.0 in America Online AOL 9.0 Security Edition allows remote attackers to execute arbitrary code via the downloadFileDirectory property, a different vulnerability than CVE-2006-5502...

CVE-2006-3888: Undefined Security Weakness

Buffer overflow in AOL You've Got Pictures YGP Pic Downloader YGPPDownload ActiveX control AOL.PicDownloadCtrl.1, YGPPicDownload.dll, as used in America Online 9.0 Security Edition, allows remote attackers to execute arbitrary code via a long argument to the SetAlbumName method...

CVE-2006-0948

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions Everyone/Full Control for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files...

CVE-2006-0948

CVE-2006-0948 concerns AOL 9.0 Security Edition revision 4184.2340 (and potentially other versions) where the installer/directory permissions grant Everyone Full Control on the America Online 9.0 directory, enabling local users to replace or manipulate critical files. Root cause is insecure defau...

CVE-2006-0948: Undefined Security Weakness

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions Everyone/Full Control for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files...