18 matches found
EUVD-2009-1088
Malware in sbrugna...
EUVD-2016-0339
Malware in sbrugna...
CVE-2012-6502
Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information about the existence of files, and read certain data from files, via a UNC share pathname in the SRC attribute of a SCRIPT element, as demonstrated by reading a name-value pair from a local file via a...
CVE-2011-0920
The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors, aka SPR PRAD89WGRS...
CVE-2016-0304
The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J...
CVE-2016-0304: Improper Access Control
The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J...
PT-2016-4136
Name of the Vulnerable Software and Affected Versions IBM Domino versions 8.5.x through 8.5.3 FP6 IF12 and versions 9.x through 9.0.1 FP5 Description The Java Console in IBM Domino, when used with a certain unsupported configuration involving UNC share pathnames, allows remote attackers to bypass...
CVE-2013-7331
The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild ...
PT-2014-1607
Name of the Vulnerable Software and Affected Versions Internet Explorer versions prior to the fixed version Microsoft.XMLDOM ActiveX control in Microsoft Windows versions prior to 8.1 Description The issue allows attackers to determine the existence of local pathnames, UNC share pathnames, intran...
CVE-2012-6395: Improper Input Validation
Cisco Adaptive Security Appliances ASA devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated users to cause a denial of service device crash via unknown vectors, aka Bug ID CSCuc65775...
CVE-2011-0920
The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors, aka SPR PRAD89WGRS...
Authentication flaw
The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors, aka SPR PRAD89WGRS...
CVE-2011-0920
The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors, aka SPR PRAD89WGRS...
CVE-2011-0920: Improper Authentication
The Remote Console in IBM Lotus Domino, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors, aka SPR PRAD89WGRS...
PT-2011-2763
Name of the Vulnerable Software and Affected Versions IBM Lotus Domino affected versions not specified Description The issue allows remote attackers to bypass authentication and execute arbitrary code. This is possible when a certain unsupported configuration involving UNC share pathnames is used...
Design/Logic Flaw
Multiple argument injection vulnerabilities in PPLive.exe in PPLive 1.9.21 and earlier allow remote attackers to execute arbitrary code via a UNC share pathname in the LoadModule argument to the 1 synacast, 2 Play, 3 pplsv, or 4 ppvod URI handler. NOTE: some of these details are obtained from thi...
Path traversal
Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via the f parameter, and possibly remote files using UNC share pathnames...
CVE-2006-0873
CVE-2006-0873 affects Coppermine Photo Gallery (docs/showdoc.php, f parameter). It is an absolute path traversal / local file inclusion vulnerability allowing arbitrary file inclusion, potentially from Windows UNC shares. Affected: Coppermine Photo Gallery 1.4.3 and earlier. Root cause: unsanitiz...