jetlib.sec » Tags » zdi

263 items tagged "zdi"

Skip to page: 1 2

November 08, 2010
19:02
ZDI-10-241.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-241 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the gwia.exe module responsible for parsing e-mail messages received by the server. When the code encounters a Content-Type header it proceeds to parse out the numbers within its contents. The process does not properly check for signed integers and if it encounters one, it loops excessively while writing to the stack. This can be abused by a remote attacker to execute arbitrary code under the context of the SYSTEM user.
Tags: code zdi vulnerability novell-groupwise mail-messages gwia

19:01
ZDI-10-238.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-238 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the gwia.exe module responsible for parsing e-mail messages received by the server. When the code encounters a Content-Type header it proceeds to parse out string data from within it. The process does not properly check the length of these values before copying them to a fixed-length buffer. This can be abused by a remote attacker to execute arbitrary code under the context of the SYSTEM user.
Tags: code zdi vulnerability novell-groupwise mail-messages gwia
19:01
ZDI-10-241.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-241 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise. Authentication is not required to exploit this vulnerability. The specific flaw exists within the gwia.exe module responsible for parsing e-mail messages received by the server. When the code encounters a Content-Type header it proceeds to parse out the numbers within its contents. The process does not properly check for signed integers and if it encounters one, it loops excessively while writing to the stack. This can be abused by a remote attacker to execute arbitrary code under the context of the SYSTEM user.
Tags: code zdi vulnerability novell-groupwise mail-messages gwia

October 18, 2010
22:01
ZDI-10-215.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-215 - This vulnerability allows attackers to execute arbitrary code on vulnerable installations of IBM Informix Dynamic Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RPC protocol parsing library, librpc.dll, utilized by the ISM Portmapper service (portmap.exe) bound by default to TCP port 36890. A lack of sanity checking on supplied parameter sizes can result in an integer overflow and subsequent heap buffer under allocation which can finally lead to an exploitable memory corruption.
Tags: txt zdi vulnerability informix-dynamic-server lack-of-sanity memory-corruption
22:01
ZDI-10-216.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-216 - This vulnerability allows attackers to execute arbitrary code on vulnerable installations of IBM Informix Dynamic Server. Authentication is required in that an attacker must have valid credentials to connect to the database. The specific flaw exists within the oninit.exe process bound by default to TCP port 9088 or 1526. A lack of sanity checking within a logging function can result in a stack based buffer overflow leading to arbitrary code execution under the context of the SYSTEM user.
Tags: txt code zdi informix-dynamic-server arbitrary-code-execution based-buffer-overflow

22:00
ZDI-10-215.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-215 - This vulnerability allows attackers to execute arbitrary code on vulnerable installations of IBM Informix Dynamic Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RPC protocol parsing library, librpc.dll, utilized by the ISM Portmapper service (portmap.exe) bound by default to TCP port 36890. A lack of sanity checking on supplied parameter sizes can result in an integer overflow and subsequent heap buffer under allocation which can finally lead to an exploitable memory corruption.
Tags: txt zdi vulnerability informix-dynamic-server lack-of-sanity memory-corruption
22:00
ZDI-10-216.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-216 - This vulnerability allows attackers to execute arbitrary code on vulnerable installations of IBM Informix Dynamic Server. Authentication is required in that an attacker must have valid credentials to connect to the database. The specific flaw exists within the oninit.exe process bound by default to TCP port 9088 or 1526. A lack of sanity checking within a logging function can result in a stack based buffer overflow leading to arbitrary code execution under the context of the SYSTEM user.
Tags: txt code zdi informix-dynamic-server arbitrary-code-execution based-buffer-overflow

October 12, 2010
21:01
ZDI-10-202.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-202 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Sun Java Runtime. User interaction is required in that a target must visit a malicious page. The specific flaw exists within the com.sun.jnlp.BasicServiceImpl class. By abusing how Web Start retrieves security policies, an attacker can forge their own and force the removal of sandbox restrictions. Successful exploitation leads to code execution under the context of the user running the browser.
Tags: zdi sun user sun-java-runtime zero-day arbitrary-code
21:01
ZDI-10-205.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-205 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun's Java Runtime Environment. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the processing of JPEG image dimensions. When specifying large values to the dimensions of a subsample an integer overflow occurs leading to memory corruption. Successful exploitation of this vulnerability can lead to remote compromise under the credentials of the currently logged in user.
Tags: zdi vulnerability user java-runtime-environment memory-corruption integer-overflow

21:01
ZDI-10-202.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-202 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Sun Java Runtime. User interaction is required in that a target must visit a malicious page. The specific flaw exists within the com.sun.jnlp.BasicServiceImpl class. By abusing how Web Start retrieves security policies, an attacker can forge their own and force the removal of sandbox restrictions. Successful exploitation leads to code execution under the context of the user running the browser.
Tags: zdi sun user sun-java-runtime zero-day arbitrary-code
21:00
ZDI-10-205.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-205 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun's Java Runtime Environment. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the processing of JPEG image dimensions. When specifying large values to the dimensions of a subsample an integer overflow occurs leading to memory corruption. Successful exploitation of this vulnerability can lead to remote compromise under the credentials of the currently logged in user.
Tags: zdi vulnerability user java-runtime-environment memory-corruption integer-overflow

September 13, 2010
19:01
ZDI-10-176.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-176 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the normalizeDocument function defined within nsDocument.cpp. When handling children nodes the code does not account for a varying number of children during normalization. An attacker can abuse this problem along with the fact that the code does not validate the child index is within bounds to access an invalid object and execute arbitrary code under the context of the browser.
Tags: code zdi vulnerability child-index zero-day target

19:00
ZDI-10-176.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-176 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the normalizeDocument function defined within nsDocument.cpp. When handling children nodes the code does not account for a varying number of children during normalization. An attacker can abuse this problem along with the fact that the code does not validate the child index is within bounds to access an invalid object and execute arbitrary code under the context of the browser.
Tags: code zdi vulnerability child-index zero-day target

1:01
ZDI-10-147.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-147 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required in that a target must open a malicious media file or visit a malicious page. The specific flaw exists within the codec responsible for parsing layer 3 MPEG audio streams. By providing invalid values within the stream, heap memory can be easily corrupted. This could be leveraged by an attacker to execute remote code under the context of the user running the application.
Tags: code zdi user heap-memory audio-streams invalid-values

1:00
ZDI-10-147.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-147 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required in that a target must open a malicious media file or visit a malicious page. The specific flaw exists within the codec responsible for parsing layer 3 MPEG audio streams. By providing invalid values within the stream, heap memory can be easily corrupted. This could be leveraged by an attacker to execute remote code under the context of the user running the application.
Tags: code zdi user heap-memory audio-streams invalid-values
0:00
ZDI-10-143.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-143 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Log Manager. Authentication is not required to exploit this vulnerability. The specific flaws exist within the fileDownload and reportPluginUpload Tomcat servlets which do not require authentication to make privileged requests to. Due to the nature of the functionality provided by these servlets, successful exploitation can lead to code execution under the context of the application.
Tags: txt zdi vulnerability manager.-authentication tomcat-servlets zero-day arbitrary-code

July 13, 2010
22:50
ZDI-10-124.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-124 - This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit these vulnerabilities. The specific flaws exist due to how the application passes CGI parameters to the internal obtool binary running on port 443. Due to improper filtering of user data a specially crafted request could lead to arbitrary commands being executed under the credentials of the service.
Tags: txt zero zdi cgi-parameters zero-day port-443

22:48
ZDI-10-123.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-123 - This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Oracle Secure Backup. The specific flaw exists within the register globals emulation layer which allows attackers to specify values for arbitrary program variables. When specific parameters are specified via the URI it is possible for an attacker to bypass the authentication mechanism and reach functionality otherwise inaccessible without proper credentials. This can be leveraged by remote attackers to trigger what were post-auth vulnerabilities without valid credentials.
Tags: txt zdi authentication uri valid-credentials proper-credentials program-variables
22:47
ZDI-10-124.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-124 - This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit these vulnerabilities. The specific flaws exist due to how the application passes CGI parameters to the internal obtool binary running on port 443. Due to improper filtering of user data a specially crafted request could lead to arbitrary commands being executed under the credentials of the service.
Tags: txt zero zdi cgi-parameters zero-day port-443
22:47
ZDI-10-125.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-125 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM solidDB. Authentication is not required to exploit this vulnerability. The specific flaw exists within the solid.exe process which listens by default on TCP port 1315. The code responsible for parsing the first handshake packet does not properly validate the length of the username field. By crafting an overly long value in the request an attacker can exploit this to execute arbitrary code under the context of the SYSTEM user.
Tags: code zdi vulnerability username-field zero-day arbitrary-code

May 06, 2010
19:41
ZDI-10-080.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-080 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Mercury LoadRunner. Authentication is not required to exploit this vulnerability. The specific flaw exists within the process magentproc.exe that binds to TCP port 54345. A specially crafted packet will allow unauthenticated users to execute local commands. When a state of 0 or 4 is passed after the parameters, mchan.dll will process the commands on the host. This allows for remote code execution under the context of the SYSTEM user.
Tags: code zdi vulnerability mercury-loadrunner hp-mercury code-execution

19:40
ZDI-10-080.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-080 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Mercury LoadRunner. Authentication is not required to exploit this vulnerability. The specific flaw exists within the process magentproc.exe that binds to TCP port 54345. A specially crafted packet will allow unauthenticated users to execute local commands. When a state of 0 or 4 is passed after the parameters, mchan.dll will process the commands on the host. This allows for remote code execution under the context of the SYSTEM user.
Tags: code zdi vulnerability mercury-loadrunner hp-mercury code-execution

April 15, 2010
20:00
ZDI-10-076.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-076 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Preview. User interaction is required in that a target must open a malicious file or visit a malicious page. The specific flaw exists within the routine TType1ParsingContext::SpecialEncoding() defined in libFontParser.dylib. While parsing glyphs from a PDF document, a malformed offset greater than 0x400 can result in a heap corruption which can be leveraged by an attacker to execute arbitrary code under the context of the current user.
Tags: code zdi user apple-preview heap-corruption zero-day glyphs

20:00
ZDI-10-076.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-076 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Preview. User interaction is required in that a target must open a malicious file or visit a malicious page. The specific flaw exists within the routine TType1ParsingContext::SpecialEncoding() defined in libFontParser.dylib. While parsing glyphs from a PDF document, a malformed offset greater than 0x400 can result in a heap corruption which can be leveraged by an attacker to execute arbitrary code under the context of the current user.
Tags: code zdi user apple-preview heap-corruption zero-day glyphs
April 14, 2010
1:00
ZDI-10-071.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-071 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe's Acrobat Reader. User interaction is required in that the victim must be coerced into opening a malicious document or visiting a malicious URL. The specific flaw exists within the parsing of embedded fonts inside a PDF document. Upon parsing particular tables out of a font file the application will miscalculate an index used for seeking into a buffer. Later the application will begin to copy data into the calculated pointer corrupting the referenced data structure. Successful exploitation will lead to code execution under the context of the application.
Tags: zdi document application acrobat-reader-user referenced-data zero-day

April 09, 2010
15:06
ZDI-10-068.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-068 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required in that a target must open a malicious media file or visit a malicious page. The specific flaw exists within the parsing of H.263 media files. The code within QuickTime trusts various values from MDAT structures and uses them during operations on heap memory. By crafting specific values the corruption can be leveraged to execute remote code under the context of the user running the application.
Tags: code zdi user apple-quicktime heap-memory h-263

15:06
ZDI-10-068.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-068 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required in that a target must open a malicious media file or visit a malicious page. The specific flaw exists within the parsing of H.263 media files. The code within QuickTime trusts various values from MDAT structures and uses them during operations on heap memory. By crafting specific values the corruption can be leveraged to execute remote code under the context of the user running the application.
Tags: code zdi user apple-quicktime heap-memory h-263

April 05, 2010
19:52
ZDI-10-062.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-062 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware NWFTPD daemon. Authentication or default anonymous access is required to exploit this vulnerability. The specific flaw exists when parsing malformed arguments to the verbs RMD, RNFR, and DELE. Overly long parameters will result in stack based buffer overflows which can be leveraged to execute arbitrary code.
Tags: code zdi vulnerability novell-netware buffer-overflows zero-day

19:52
ZDI-10-054.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-054 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sun's Java Runtime Environment. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the processing of JPEG image dimensions. When specifying large values to the dimensions of a subsample an integer overflow occurs leading to memory corruption. Successful exploitation of this vulnerability can lead to a compromise under the credentials of the currently logged in user.
Tags: zdi vulnerability user java-runtime-environment memory-corruption integer-overflow
19:52
ZDI-10-055.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-055 - This vulnerability allows remote attackers to violate security policies on vulnerable installations of Sun Java Runtime. User interaction is required to exploit this vulnerability in that the target must run a malicious applet. The specific flaw allows malicious applets to connect to network addresses other than the originating applet and client IPs. A handcrafted applet can override compile time checks to prevent compilation of a mutable InetAddress subclass. This results in the ability to circumvent the Applet SecurityManager restrictions.
Tags: zdi vulnerability applet sun-java-runtime malicious-applet malicious-applets
19:52
ZDI-10-058.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-058 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Mac OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Apple ImageIO framework during the parsing of malformed JPEG2000 files. The function CGImageReadGetBytesAtOffset can utilize miscalculated values during a memmove operation that will result in an exploitable heap corruption allowing attackers to execute arbitrary code under the context of the current user.
Tags: code zdi vulnerability apple-imageio apple-mac-os x.-user heap-corruption apple-mac-os-x
19:52
ZDI-10-062.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-062 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware NWFTPD daemon. Authentication or default anonymous access is required to exploit this vulnerability. The specific flaw exists when parsing malformed arguments to the verbs RMD, RNFR, and DELE. Overly long parameters will result in stack based buffer overflows which can be leveraged to execute arbitrary code.
Tags: code zdi vulnerability novell-netware buffer-overflows zero-day

February 20, 2010
12:00
ZDI-10-019.txt
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 10-019 - This vulnerability allows remote attackers to bypass specific script execution enforcements on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the lack of cross domain policy enforcement. Through usage of the showModalDialog() JavaScript method an attacker can gather sensitive information from another website. This vulnerability can be exploited to obtain website credentials not originating from the attacking site.
Tags: zdi vulnerability website showmodaldialog-javascript target domain-policy

12:00
ZDI-10-019.txt
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 10-019 - This vulnerability allows remote attackers to bypass specific script execution enforcements on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the lack of cross domain policy enforcement. Through usage of the showModalDialog() JavaScript method an attacker can gather sensitive information from another website. This vulnerability can be exploited to obtain website credentials not originating from the attacking site.
Tags: zdi vulnerability website showmodaldialog-javascript target domain-policy

Skip to page: 1 2

jetlib.sec » Tags » zdi

Feeds

263 items tagged "zdi"

Tags: sitescope soap call code-execution zdi bugtraq

Tags: sitescope day soap code-execution zdi bugtraq

Tags: day orchestration operations code-execution zdi

Tags: sitescope day soap code-execution zdi bugtraq

Tags: client thin indusoft code-execution zdi thin-client

Tags: day packard intelligent code-execution intelligent-management zdi

Tags: sitescope day soap code-execution zdi bugtraq

Tags: day management inode code-execution zdi management-center

Tags: day management intelligent code-execution intelligent-management zdi

Tags: excel microsoft series type-mismatch code-execution zdi

Tags: internet microsoft explorer code-execution zdi internet-explorer

Tags: ftagent emc autostart code-execution zdi

Tags: ftagent emc autostart code-execution zdi

Tags: size sean atom apple-quicktime code-execution zdi

Tags: lotus ibm notes code-execution zdi bugtraq

Tags: code remote swapinnode code-execution zdi bugtraq

Tags: excel mergecells oracle code-execution zdi bugtraq

Tags: client thin indusoft code-execution zdi thin-client

Tags: code-execution autostart zdi

Tags: smartfilter mcafee administration code-execution administration-server zdi

Tags: dwgdp microsoft visio microsoft-visio code-execution zdi

Tags: Public invalid movie apple-quicktime code-execution zdi

Tags: obunmarshal exe sap crystal-reports code-execution zdi bugtraq

Tags: quickr lotus ibm code-execution zdi bugtraq

Tags: size sample jpeg apple-quicktime code-execution zdi

Tags: nshtmlselectelement mozilla remote code-execution mozilla-firefox zdi

Tags: microsoft remote windows code-execution zdi bugtraq

Tags: framework microsoft net code-execution microsoft-net-framework zdi

Tags: qtplugin remote setlanguage apple-quicktime code-execution zdi

Tags: ftagent emc autostart code-execution zdi

Tags: ftagent emc autostart code-execution zdi

Tags: coda openview code c-remote code-execution zdi

Tags: ftagent emc autostart code-execution zdi

Tags: coda openview remote code-execution zdi

Tags: attributechildremoved mozilla firefox code-execution zdi bugtraq

Tags: abap netweaver sap sap-netweaver code-execution zdi

Tags: style-element code-execution zdi

Tags: element code remote apple-quicktime code-execution zdi

Tags: element remote sampledata apple-quicktime code-execution zdi

Tags: avaya office customer code-execution office-customer zdi

Tags: code remote execution apple-quicktime uri-buffer code-execution zdi

Tags: track descriptor text apple-quicktime code-execution bugtraq zdi

Tags: admsd multiple cognos code-execution zdi

Tags: activex aol dnupdater uninitialized-pointer code-execution zdi

Tags: openview performance manager code-execution performance-manager zdi

Tags: gateway symantec web code-execution web-gateway zdi

Tags: realplayer realnetworks dmp code-execution zdi

Tags: realplayer rvrender realnetworks realnetworks-realplayer code-execution zdi

Tags: openaccess giop datadirect e-remote code-execution zdi

Tags: width parsing picture apple-quicktime code-execution zdi

Tags: player adobe flash code-execution adobe-flash-player zdi

Tags: code-execution zdi apple-quicktime

Tags: oracle code remote oracle-java code-execution zdi

Tags: robnetscanhost abb webware code-execution zdi

Tags: control rhapsody rational code-execution zdi bugtraq

Tags: rhapsody ibm rational code-execution zdi bugtraq

Tags: rhapsody ibm rational code-execution zdi bugtraq

Tags: total suite defense sql-injection zdi management-web

Tags: spss ibm exporthtml code-execution zdi

Tags: novell-iprint code-execution zdi

Tags: reader adobe bmp code-execution adobe-reader zdi

Tags: total suite defense service-database zdi management-web

Tags: ooxml relationship oracle code-execution zdi bugtraq

Tags: code easy remote code-execution zdi vulnerability

Tags: code-execution zdi vulnerability

Tags: code easy remote code-execution zdi vulnerability

Tags: novell netware nlm novell-netware code-execution zdi

Tags: novell netware xnfs novell-netware code-execution zdi

Tags: img administration printing zdi vulnerabilities

Tags: openview nnm dll code-execution hp-openview zdi

Tags: mpauploader administration printing code-execution zdi bugtraq

Tags: jobdelivery administration printing zdi bugtraq vulnerabilities

Tags: openview nnm nnmrptconfig code-execution hp-openview zdi