125 matches found
CVE-2013-0392
Technical details about CVE-2013-0392 are not publicly provided in the supplied documents. No explicit affected products, vulnerable components, impact, or exploitation information are present beyond general reference to Oracle PeopleSoft PeopleTools 8.51/8.52.
Apache Struts 2 CookieInterceptor OGNL Script Injection (CVE-2012-0392)
A code execution vulnerability has been reported in Apache Struts 2...
CVE-2012-0392
The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method...
CVE-2012-0392
The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method...
CVE-2012-0392
CVE-2012-0392 affects Apache Struts: CookieInterceptor does not enforce a parameter-name whitelist, enabling remote code execution via a crafted HTTP Cookie header that can trigger Java code execution through a static method. The Nuclei template confirms this as part of the S2-008 family, describ...
CVE-2012-0392
creationtimestamp| type| source ---|---|--- 2012-01-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18329...
CentOS Update for libtiff CESA-2011:0392 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for libtiff CESA-2011:0392 centos4 x86_64
Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2011:0392 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
RHEL 4 / 5 / 6 : libtiff (RHSA-2011:0392)
The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0392 advisory. - libtiff: heap-based buffer overflow in thunder decoder ZDI-11-107 CVE-2011-1167 Note that Nessus has not tested for this issue but has...
CVE-2011-0392
CVE-2011-0392 affects Cisco TelePresence Recording Server 1.6.x with an unauthenticated XML-RPC interface exposed on TCP port 8080. The connected Cisco advisory documents that this XML-RPC Interface vulnerability allows an unauthenticated remote attacker to perform actions that should be restrict...
CVE-2002-0392
creationtimestamp| type| source ---|---|--- 2010-07-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16782 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apachechunked.rb 2025-02-06 03:13:37+00:00| seen|...
TheGreenBow IPSec VPN Client Local Stack Overflow Vulnerability
TheGreenBow IPSec VPN Client is prone to a stack overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-0392
The GreenBow IPSec VPN Client vulnerability CVE-2010-0392 is a stack-based overflow in vpnconf.exe. A long OpenScriptAfterUp parameter in a .tgb policy file (phase 2) can allow a user‑assisted remote attacker to execute arbitrary code in affected versions 4.51.001 and 4.65.003 (and possibly other...
CVE-2010-0392
Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a long OpenScriptAfterUp parameter in a policy .tgb file, related to "phase 2."...
Apache Win32 Chunked Encoding
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Apache Win32...
CVE-2009-0392
The CVE-2009-0392 issue affects Motorola Wimax modem CPEi300 (sysconf.cgi). The vulnerability arises from a directory traversal via the page parameter (".."), allowing remote authenticated users to read arbitrary files. CVSS shows a base score of 6.8 (MEDIUM) with network attack vector, low attac...
FreeBSD Ports: ppxp
The remote host is missing an update to the system as announced in the referenced advisory. VID 641e8609-cab5-11d9-9aed-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: racoon
The remote host is missing an update to the system as announced in the referenced advisory. VID 40fcf20f-8891-11d8-90d1-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-0392
CVE-2008-0392 : Multiple buffer overflows in Microsoft Visual Basic Enterprise Edition 6.0 SP6 allow user-assisted remote attackers to execute arbitrary code via a .dsr file containing a long (1) ConnectionName or (2) CommandName line. The connected documents confirm the affected product/version ...
Debian Security Advisory DSA 725-1 (ppxp)
The remote host is missing an update to ppxp announced via advisory DSA 725-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...