362 matches found
phpcms front Desk arbitrary code execution php must be less than 5. 3-the vulnerabilities and early warning-the black bar safety net
phpcms v9 string2arrayfunction using the eval function,in more than one place may cause code execution vulnerability /phpssoserver/phpcms/libs/functions/global.func.php | 1 2 3 4 5 6 7 8 9 1 0 1 1 | / Converts a string to an array @param string $data the string @return array returns the array...
ManageEngine Desktop Central StatusUpdate Arbitrary File Upload
This module exploits an arbitrary file upload vulnerability in ManageEngine DesktopCentral v7 to v9 build 90054 including the MSP versions. A malicious user can upload a JSP file into the web root without authentication, leading to arbitrary code execution as SYSTEM. Some early builds of version ...
CVE-2014-5103
Cross-site scripting XSS vulnerability in ZOHO ManageEngine EventLog Analyzer 9 build 9000 allows remote attackers to inject arbitrary web script or HTML via the jusername parameter to event/jsecuritycheck. Fixed in Version 10 Build 10000...
Adobe Acrobat Reader 7-9 - U3D BoF
No description provided by source. Copyright c 2009, Felipe Andres Manzano [email protected] All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: Redistributions of source...
Adobe Acrobat Reader All Version <9.x - Memory Corruption
No description provided by source. --------------------------------------------------------------------------- Title : Adobe Acrobat Reader All Version memory corruption Product: Adobe Acrobat Reader Product Homepage: www.adobe.com...
Solaris 9 (x86) : 149074-01
Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Print Filter Utility. Supported versions that are affected are 9, 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in...
Adobe Reader Denial of Service & Code Execution Vulnerabilities - Mac OS X
Adobe Reader is prone to denial of service and code execution vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft Internet Explorer Multiple Vulnerabilities (2862772)
This host is missing a critical security update according to Microsoft Bulletin MS13-059. OpenVAS Vulnerability Test $Id: secpodms13-059.nasl 6079 2017-05-08 09:03:33Z teissa $ Microsoft Internet Explorer Multiple Vulnerabilities 2862772 Authors: Thanga Prakash S Copyright: Copyright c 2013 SecPo...
Microsoft Internet Explorer 'CHtmTagStm' Use After Free Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Microsoft Internet Explorer 9 is affected...
Microsoft Internet Explorer CVE-2013-0811 Use-After-Free Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...
Microsoft Internet Explorer CVE-2013-1307 Use-After-Free Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...
High-risk vulnerabilities CVE-2 0 1 3-0 0 2 7 EXP, the impact of IE on all versions-bug warning-the black bar safety net
Microsoft Internet Explorer handles CPasteComma there is a use-after-free error allows constructing a malicious WEB page and entice a user to parse, can be the application context to execute arbitrary code. CVE number CVE-2 0 1 3-0 0 2 7, The impact of the version as follows: Microsoft Internet...
FreeBSD : PostgreSQL -- anonymous remote access data corruption vulnerability (3f332f16-9b6b-11e2-8fe9-08002798f6ff)
PostgreSQL project reports : The PostgreSQL Global Development Group has released a security update to all current versions of the PostgreSQL database system, including versions 9.2.4, 9.1.9, 9.0.13, and 8.4.17. This update fixes a high-exposure security vulnerability in versions 9.0 and later. A...
Adobe Acrobat Multiple Vulnerabilities -01 Jan 13 (Windows)
This host is installed with Adobe Acrobat and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeacrobatmultvuln01jan13win.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Acrobat Multiple Vulnerabilities -01 Jan 13 Windows Authors: Thanga Prakash S Copyright: Copyright C...
Adobe Acrobat Multiple Unspecified Vulnerabilities -01 Feb13 (Mac OS X)
This host is installed with Adobe Acrobat and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeacrobatmultunspecifiedvuln01feb13macosx.nasl 27950 2013-02-19 19:32:21Z feb$ Adobe Acrobat Multiple Unspecified Vulnerabilities -01 Feb13 Mac OS X Authors: Thanga...
PHPCMS V9 member table of contents feel free to modify the vulnerability and fix-vulnerability warning-the black bar safety net
A variable is not initialized causing the server setting registerglobal=On when members can freely modify their own member information. Due to the need registerglobal=On support, the impact is limited.. Vulnerability relates to members can modify their own balance lead to the website may have...
Microsoft Internet Explorer Remote Code Execution Vulnerability (2757760)
This host is missing a critical security update according to Microsoft Bulletin MS12-063. OpenVAS Vulnerability Test $Id: gbmsiecodeexecvulnvuln.nasl 5958 2017-04-17 09:02:19Z teissa $ Microsoft Internet Explorer Remote Code Execution Vulnerability 2757760 Authors: Rachana Shetty Copyright:...
SuSE Update for MozillaFirefox openSUSE-SU-2012:0039-2 (MozillaFirefox)
Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse201200392.nasl 8257 2017-12-29 06:29:46Z teissa $ SuSE Update for MozillaFirefox openSUSE-SU-2012:0039-2 MozillaFirefox Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...
PT-2012-3425 · Esri · Esri Arcgis +1
Name of the Vulnerable Software and Affected Versions: ESRI ArcMap version 9 ESRI ArcGIS versions 10.0.2.3200 and earlier Description: The issue allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map .mxd file, due to the software not properly prompting users before...
MozillaFirefox (important)
Mozilla Firefox Version 9 fixes several security issues: MFSA 2011-53/CVE-2011-3660: Miscellaneous memory safety hazards MFSA 2011-54/CVE-2011-3661: Potentially exploitable crash in the YARR regular expression library MFSA 2011-55/CVE-2011-3658: nsSVGValue out-of-bounds access MFSA...