CVE-2011-1033
published 2011-02-15CVE-2011-1033: Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via crafted arguments in the…
PriorityP348critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
4.76%
90.8th percentile
Stack-based buffer overflow in oninit in IBM Informix Dynamic Server (IDS) 11.50 allows remote attackers to execute arbitrary code via crafted arguments in the USELASTCOMMITTED session environment option in a SQL SET ENVIRONMENT statement.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | informix_dynamic_server | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
NetSarang Xlpd Printer Daemon 4 - Denial of Service
exploitdb·2012-02-02
CVE-2012-1009 NetSarang Xlpd Printer Daemon 4 - Denial of Service
NetSarang Xlpd Printer Daemon 4 - Denial of Service
---
##############################################################################
#
# Title : NetSarang Xlpd Printer Daemon Denial of Service Vulnerability
# Author : Prabhu S Angadi SecPod Technologies (www.secpod.com)
# Vendor : http://www.netsarang.com
# Advisory : http://secpod.org/blog/?p=457
# http://secpod.org/advisories/SecPod_Exploit_NetSarang_Xlpd_Printer_Daemon_DoS_Vuln.txt
# http://secpod.org/exploits/SecPod_Exploit_NetSarang_Xlpd_Printer_Daemon_DoS.py
# Software : NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186
# Date : 01/02/2012
#
##############################################################################
SecPod ID: 1033 14/12/2011 Issue Discovered
20/01/2012 Vendor Notified
No Response
01/
Exploit-DB
Microsoft Visual Studio Report Viewer 2005 Control - Multiple Cross-Site Scripting Vulnerabilities
exploitdb·2011-08-09
CVE-2011-1976 Microsoft Visual Studio Report Viewer 2005 Control - Multiple Cross-Site Scripting Vulnerabilities
Microsoft Visual Studio Report Viewer 2005 Control - Multiple Cross-Site Scripting Vulnerabilities
---
source: https://www.securityfocus.com/bid/49033/info
Microsoft Visual Studio is prone to multiple cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to spoof content or disclose sensitive information.
https://www.example.com/Reserved.ReportViewerWebControl.axd?Mode=true&ReportID=%3CarbitraryIDvalue%3E&ControlID=%3CvalidControlID%3E&Culture=1033&UICulture=1033&ReportStack=1&OpType=SessionKeepAlive&TimerMethod=KeepAliveMethodctl00_PlaceHolderMain_SiteTopUsersByHits_ctl00T
No writeups or analysis indexed.
http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-ibmhttp://secunia.com/advisories/43212http://securityreason.com/securityalert/8078http://www.securityfocus.com/archive/1/516250/100/0/threadedhttp://www.securityfocus.com/bid/46230http://www.vupen.com/english/advisories/2011/0309http://zerodayinitiative.com/advisories/ZDI-11-050/https://exchange.xforce.ibmcloud.com/vulnerabilities/65209http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-ibmhttp://secunia.com/advisories/43212http://securityreason.com/securityalert/8078http://www.securityfocus.com/archive/1/516250/100/0/threadedhttp://www.securityfocus.com/bid/46230http://www.vupen.com/english/advisories/2011/0309http://zerodayinitiative.com/advisories/ZDI-11-050/https://exchange.xforce.ibmcloud.com/vulnerabilities/65209
2011-02-15
Published