CVE-2016-0390

IBM Algo One - Algo Risk Application (ARA) versions 4.9.1 through 5.1.0 are affected by CVE-2016-0390, a cross-site scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote attacker could exploit this via a specially crafted URL to execute script in a victim’s ...

CVE-2015-0390

Unspecified vulnerability in the MICROS Retail component in Oracle Retail Applications Xstore: 3.2.1, 3.4.2, 3.5.0, 4.0.1, 4.5.1, 4.8.0, 5.0.3, 5.5.3, 6.0.6, and 6.5.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Xstore Point of Sal...

CVE-2015-0390

The CVE-2015-0390 issue is an unspecified vulnerability in Oracle Retail Applications MICROS Retail component (Xstore Point of Sale). Affected is MICROS Retail Xstore: versions 3.2.1, 3.4.2, 3.5.0, 4.0.1, 4.5.1, 4.8.0, 5.0.3, 5.5.3, 6.0.6, and 6.5.2. Remote attackers could affect confidentiality,...

openSUSE Security Update : gnutls (openSUSE-2012-121)

Fix GnuTLS DTLS plaintext recovery attack %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-121. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc'...

openSUSE Security Update : gnutls (openSUSE-SU-2012:0344-1)

This update of GnuTLS fixes a vulnerability in the DTLS implementation which could allow remote attackers to recover partial plaintext via a timing side-channel attack. CVE-2012-0390. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2014-0390

CVE-2014-0390 is an unspecified vulnerability in Oracle Solaris 10 affecting the Java Web Console component. The Solaris 10 (x86) plugin notes that the vulnerability allows unauthenticated network attacks via HTTP, potentially leading to unauthorized updates/inserts/deletes of Solaris data. The S...

SuSE 11.1 Security Update : GnuTLS (SAT Patch Number 6448)

This update of GnuTLS fixes multiple vulnerabilities : - remote attackers could cause a denial of service heap memory corruption and application crash via an issue in the asn1getlengthder function. CVE-2012-1569 - crafted GenericBlockCipher structures allow remote attackers to cause a denial of...

CVE-2013-0390

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect integrity via unknown vectors related to Bookmarkable Pages...

CVE-2013-0390

CVE-2013-0390 describes an unspecified vulnerability in the Oracle Applications Framework (OAF) component of Oracle E-Business Suite (versions 11.5.10.2, 12.0.6, 12.1.3). The issue allows remote authenticated users to affect integrity via unknown vectors related to Bookmarkable Pages . The descri...

SuSE 10 Security Update : GnuTLS (ZYPP Patch Number 8066)

This update of GnuTLS fixes multiple vulnerabilities : - remote attackers could cause a denial of service heap memory corruption and application crash via an issue in the asn1getlengthder function. CVE-2012-1569 - crafted GenericBlockCipher structures allow remote attackers to cause a denial of...

CVE-2012-0390

The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related...

CVE-2012-0390

The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length and the ciphertext size, which makes it easier for remote attackers to recover partial plaintext via a timing side-channel attack, a related...

CVE-2012-0390

Technical details about CVE-2012-0390 (DTLS timing side-channel in GnuTLS

CVE-2011-0390

CVE-2011-0390 affects Cisco TelePresence Multipoint Switch (CTMS). A remote, unauthenticated attacker can crash the call-geometry process by sending a crafted XML-RPC request to the device (TCP port 9000), causing a denial of service. Affected software versions include CTMS 1.0.x, 1.1.x, 1.5.x, 1...

CVE-2010-0390

Affected: PHP F1 Max's Image Uploader 1.0 (maxImageUpload/index.php). Unrestricted file upload exploitable when Apache does not handle mime-types for pjpeg/jpeg, allowing remote code execution by uploading a payload and accessing it directly under original/. Public exploit references exist (Explo...

CVE-2010-0390

creationtimestamp| type| source ---|---|--- 2010-01-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11169...

Fedora Update for spamassassin FEDORA-2007-0390

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Enomaly ECP/Enomalism: Multiple vulnerabilities in enomalism2.sh (redux)

Enomaly ECP/Enomalism: Multiple vulnerabilities in enomalism2.sh redux Synopsis All versions of Enomaly ECP/Enomalism1 before 2.2.1 have multiple issues relating to the use of temporary files in an insecure manner. Fixes for CVE-2008-49902 and CVE-2009-03903 in 2.1.1 and 2.2 were found to be...

Enomaly ECP / Enomalism < 2.2.1 Multiple Local Vulnerabilities

Exploit for multiple platform in category local exploits ============================================================== Enomaly ECP / Enomalism 2.2.1 Multiple Local Vulnerabilities ============================================================== Enomaly ECP/Enomalism: Multiple vulnerabilities in...

Enomaly ECP/Enomalism enomalism2.sh Temporary Files

Enomaly ECP/Enomalism: Multiple vulnerabilities in enomalism2.sh redux Synopsis All versions of Enomaly ECP/Enomalism1 before 2.2.1 have multiple issues relating to the use of temporary files in an insecure manner. Fixes for CVE-2008-49902 and CVE-2009-03903 in 2.1.1 and 2.2 were found to be...