9838 matches found
CVE-2011-5088
The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input, which allows remote attackers to execute arbitrary code via a crafted web site, related to a "Workbench32/WebHMI component SetTrustedZone Policy...
SOL13519 - Multiple PHP vulnerabilities
Vulnerability Recommended Actions To mitigate this vulnerability, expose the administrative interface only on trusted networks and limit login access to trusted users. Impact of action: None. Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957:...
LG-Nortel ELO GS24M Switch contains multiple vulnerabilities
Overview The LG-Nortel ELO GS24M switch web management interface contains multiple vulnerabilities including; authentication bypass CWE-592 and information exposure CWE-200. Description The LG-Nortel ELO GS24M switch web management interface authentication can be bypassed by accessing URL's for...
Microsoft Visual Studio Add-In Local Privilege Escalation Vulnerability
Description Microsoft Visual Studio is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Microsoft Visu...
SuSE 11.1 Security Update : libfreebl3 (SAT Patch Number 5138)
This update updates Mozilla NSS to 3.12.11. The update marks the compromised DigiNotar Certificate Authority as untrusted For more information read : MFSA 2011-34 - update to 3.12.10 - root CA changes - filter certain bogus certs bmo642815 - fix minor memory leaks - other bugfixes - update to...
Microsoft Pinyin IME (CVE-2011-2010) Local Privilege Escalation Vulnerability
Description Microsoft Pinyin IME is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Failed exploit attempts may...
SINIT Buffer Overflow Vulnerability
Summary: Intel® Trusted Execution Technology SINIT Authenticated Code Modules ACMs are susceptible to a buffer overflow issue. Intel is providing updated SINIT ACMs to mitigate this issue and microcode updates to revoke vulnerable SINIT ACMs. Description: When Intel® Trusted Execution Technology...
UBUNTU-CVE-2011-1162
The tpmread function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command...
kernel: tpm: infoleak
The tpmread function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command...
kernel: tpm: infoleak
The tpmread function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command...
[SECURITY] Fedora 14 Update: krb5-1.8.4-3.fc14
Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...
TimThumb Arbitrary Code Injection
Binary data 6059.prm...
Facebook "Trusted friends" Security Feature Easily Exploitable
Facebook "Trusted friends" Security Feature Easily Exploitable Last week Facebook announced that in one day 600,000 accounts possibly get hacked. Another possible solution for Facebook to combat security issues is to find 3 to 5 "Trusted friends". Facebook will be adding two new security features...
Facebook "Trusted friends" Security Feature Easily Exploitable
Facebook "Trusted friends " Security Feature Easily Exploitable Last week Facebook announced that in one day 600,000 accounts possibly get hacked. Another possible solution for Facebook to combat security issues is to find 3 to 5 "Trusted friends ". Facebook will be adding two new security featur...
Windows Manage Certificate Authority Removal
This module allows the attacker to remove an arbitrary CA certificate from the victim's Trusted Root store. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Manage Certificate Authority...
PcVue 10.0 SV.UIGrdCtrl.1 - 'LoadObject()'/'SaveObject()' Trusted DWORD (Metasploit)
$Id: pcvuefunc.rb 13889 2011-10-12 10:57:31Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
kernel: tpm infoleaks
The tpmopen function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local users to obtain potentially sensitive information from kernel memory via unspecified vectors...
CVE-2008-7300
The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv39 through snv67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control MAC policy and obtain access to the global zone...
Improper access control
The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv39 through snv67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control MAC policy and obtain access to the global zone...
CVE-2008-7300
The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv39 through snv67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control MAC policy and obtain access to the global zone...