CVE-2015-0392

Affected product/versions: Oracle Siebel CRM 8.1.1 and 8.2.2. Vulnerable component: Siebel Core – Server BizLogic Script (Config – Scripting). Root cause / nature: A security vulnerability in the BizLogic Script component could allow unauthorized access to data, as described by CVE-2015-0392 and ...

CVE-2014-0392

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...

CVE-2014-0392

Technical details about CVE-2014-0392 are not publicly provided in the supplied documents. No specifics on affected product/version, vulnerability mechanism, impact, or fixes are present. Monitor for updates.

CVE-2013-0392

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2012-5059...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Products 8.51 and 8.52 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2013-0392...

CVE-2013-0392

Technical details about CVE-2013-0392 are not publicly provided in the supplied documents. No explicit affected products, vulnerable components, impact, or exploitation information are present beyond general reference to Oracle PeopleSoft PeopleTools 8.51/8.52.

Apache Struts 2 CookieInterceptor OGNL Script Injection (CVE-2012-0392)

A code execution vulnerability has been reported in Apache Struts 2...

CVE-2012-0392

The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method...

CVE-2012-0392

The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method...

be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2) +81 more potentially affected by CVE-2012-0392 via org.apache.struts:struts2-core (>=2.0.5, <=2.2.3)

org.apache.struts:struts2-core MAVEN version =2.0.5, =1.2.1, =0.6, =3.0-rc2, =2.4.0, =2.1.0, =3.1.1 and more Source cves: CVE-2012-0392 Source advisory: MEND:CVE-2012-0392...

CVE-2012-0392

CVE-2012-0392 affects Apache Struts: CookieInterceptor does not enforce a parameter-name whitelist, enabling remote code execution via a crafted HTTP Cookie header that can trigger Java code execution through a static method. The Nuclei template confirms this as part of the S2-008 family, describ...

CVE-2012-0392

creationtimestamp| type| source ---|---|--- 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18329...

CentOS Update for libtiff CESA-2011:0392 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for libtiff CESA-2011:0392 centos4 x86_64

Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2011:0392 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

RHEL 4 / 5 / 6 : libtiff (RHSA-2011:0392)

The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0392 advisory. - libtiff: heap-based buffer overflow in thunder decoder ZDI-11-107 CVE-2011-1167 Note that Nessus has not tested for this issue but has...

CVE-2011-0392

CVE-2011-0392 affects Cisco TelePresence Recording Server 1.6.x with an unauthenticated XML-RPC interface exposed on TCP port 8080. The connected Cisco advisory documents that this XML-RPC Interface vulnerability allows an unauthenticated remote attacker to perform actions that should be restrict...

CVE-2002-0392

creationtimestamp| type| source ---|---|--- 2010-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16782 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apachechunked.rb 2025-02-06 03:13:37+00:00| seen|...

TheGreenBow IPSec VPN Client Local Stack Overflow Vulnerability

TheGreenBow IPSec VPN Client is prone to a stack overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-0392

Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a long OpenScriptAfterUp parameter in a policy .tgb file, related to "phase 2."...

CVE-2010-0392

The GreenBow IPSec VPN Client vulnerability CVE-2010-0392 is a stack-based overflow in vpnconf.exe. A long OpenScriptAfterUp parameter in a .tgb policy file (phase 2) can allow a user‑assisted remote attacker to execute arbitrary code in affected versions 4.51.001 and 4.65.003 (and possibly other...