CVE-2013-6488

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-0328. Reason: This candidate is a reservation duplicate of CVE-2013-0328. Notes: All CVE users should reference CVE-2013-0328 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-0328. Reason: This candidate is a reservation duplicate of CVE-2013-0328. Notes: All CVE users should reference CVE-2013-0328 instead of this candidate. All references and descriptions in this candidate have been removed to...

Oracle Linux 6 : subversion (ELSA-2011-0328)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0328 advisory. 1.6.11-2.3 - add security fix for CVE-2011-0715 681173 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

CVE-2013-0328

Cross-site scripting XSS vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-0328

CVE-2013-0328 is an XSS vulnerability in Jenkins prior to 1.502 and LTS prior to 1.480.3 . It allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Remediation per advisories is to upgrade to a fixed version (Jenkins 1.502+ or LTS 1.480.3+) or newer. The exact ve...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1.2 update

Red Hat OpenShift Enterprise 1.1.2, which fixes several security issues, is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for eac...

RedHat Update for subversion RHSA-2011:0328-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-0328

Janetter before 3.3.0.0 aka 3.3.0 allows remote attackers to obtain session information for twitter.com web sites via unspecified vectors...

CVE-2012-0328

CVE-2012-0328 affects Janetter, a Twitter client, where Janetter before version 3.3.0.0 is vulnerable to information disclosure. When a malicious page is opened in a browser while Janetter is in use, session information used to communicate with Twitter may be disclosed to an attacker via unspecif...

CVE-2010-0328

CVE-2010-0328 affects the TYPO3 Unit Converter extension cs2_unitconv (version 1.0.4). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Public references indicate a fixed version is 1.0.5 (possible upgrade...

HP-UX Update for ARPA Transport HPSBUX00205

Check for the Version of ARPA Transport OpenVAS Vulnerability Test HP-UX Update for ARPA Transport HPSBUX00205 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CVE-2009-0328

creationtimestamp| type| source ---|---|--- 2009-01-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7816...

Sql injection

SQL injection vulnerability in class/page.php in Farsi Script aka FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might be the same issue as CVE-2008-0328...

CVE-2008-0328

CVE-2008-0328 describes an SQL injection in page.php of FaScript FaName 1.0, where the attacker can manipulate the id parameter to execute arbitrary SQL commands. The vulnerability is caused by unsafely incorporating user input into SQL queries, enabling unauthenticated remote access with potenti...

Debian Security Advisory DSA 399-1 (epic4)

The remote host is missing an update to epic4 announced via advisory DSA 399-1. OpenVAS Vulnerability Test $Id: deb3991.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 399-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Buffer overflow

Multiple buffer overflows in an ActiveX control boisweb.dll in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote attackers to execute arbitrary code via the 1 the second parameter to the DownloadAndExecute method and 2 third parameter to the AddFileEx method, a different...

CVE-2007-0328

The CVE-2007-0328 issue concerns the DWUpdateService ActiveX control (in Macrovision FLEXnet Connect 6.0 and Update Service 3.x–5.x) exposed by agent.exe. The vulnerability allows remote command execution through the Execute() method and retrieval of the exit status via GetExitCode(), enabling ar...

CentOS 4 : firefox (CESA-2006:0328)

Updated firefox packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include CVE-2006-0748, an issue fixed by these erratum packages...

RHEL 4 : firefox (RHSA-2006:0328)

Updated firefox packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include CVE-2006-0748, an issue fixed by these erratum packages...

CVE-2006-0328

CVE-2006-0328 describes a format-string vulnerability in Tftpd32 2.81 where processing of a crafted filename in a GET or SEND request can cause a remote denial of service. Some sources also indicate a risk of remote code execution under the server’s privileges. The issue is documented across mult...