EMC M&R (Watch4net) Centralized Management Console XSS Vulnerability

A cross site scripting vulnerability was found in EMC M&R Watch4net Centralized Management Console. This issue allows attackers to perform a wide variety of actions, such as stealing victims' session tokens or login credentials, performing arbitrary actions on their behalf, logging their...

CVE-2015-0513

CVE-2015-0513 describes Cross-Site Scripting in EMC M&R (Watch4Net) Centralized Management Console and related UI components. Affected products are EMC M&R (Watch4Net) up to version 6.5u1 and EMC ViPR SRM up to version 3.6.1. The root cause is reflected/stored XSS in administrative UI elements (C...

RedHat Update for libxml2 RHSA-2014:0513-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 6 : libxml2 (CESA-2014:0513)

Updated libxml2 packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Oracle Linux 6 : libxml2 (ELSA-2014-0513)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0513 advisory. - Improve handling of xmlStopParserCVE-2013-2877 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Adobe Illustrator < 16.0.5 / 16.2.0 < 16.2.2 (APSB14-11)

The version of Adobe Illustrator installed on the remote Windows host is prior to 16.0.5, 16.2.2. It is, therefore, affected by a vulnerability as referenced in the APSB14-11 advisory. - Stack-based buffer overflow in Adobe Illustrator CS6 before 16.0.5 and 16.2.x before 16.2.2 allows remote...

CVE-2014-0513

Adobe Illustrator CS6 is affected by CVE-2014-0513 due to a stack-based buffer overflow in versions before 16.0.5 (Windows) and before 16.2.2 (macOS); exploitation could allow remote code execution. The issue is documented under APSB14-11 with affected OS variants (Windows and macOS). Remediation...

KLA10028 ACE vulnerability in Adobe Illustrator

An unspecified vulnerability was found in Adobe Illustrator CS6. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network at a point related to an unspecified application. Original advisories Adobe bulletin Related products...

Oracle Linux 5 : Moderate: / gimp (ELSA-2007-0513)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0513 advisory. 1.2.3-20.9.el3 - validate bytesperline header field when loading PCX files 247570 1.2.3-20.8.el3 - reduce GIMPMAXIMAGESIZE to 2^18 to detect bogus imag...

CVE-2013-0513

IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks " double quote characters in the service path, which allows local users to gain privileges via a Trojan horse program, related to an "Unquoted Service Path...

CVE-2012-0513

Oracle E-Business Suite’s Oracle Application Object Library (AOL) contains an unspecified vulnerability affecting REST Services in versions 12.0.6 and 12.1.3 that could allow remote attackers to impact integrity. The CVE description is repeated across sources (NVD entry CVE-2012-0513). No exploit...

CVE-2011-0513

CVE-2011-0513 concerns the DCR.sys driver in SecurStar DriveCrypt (versions 5.4, 5.3 and earlier). The vulnerability allows local privilege escalation by passing a crafted argument to the 0x00073800 IOCTL, enabling arbitrary code execution on the affected host. Reported impact in the public recor...

CVE-2010-0513

CVE-2010-0513: Stack-based buffer overflow in PS Normalizer causes remote code execution or denial of service when processing crafted PostScript documents. Affected on Mac OS X up to 10.6.2; fixed in Mac OS X 10.6.3 Security Update (10.6.3+). Ensure systems are updated to the 10.6.3+ update to mi...

CVE-2010-0513

Stack-based buffer overflow in PS Normalizer in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PostScript document...

CVE-2009-0513

WebFrame 0.76 is affected by multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code. The flaw is triggered via a URL in the classFiles parameter to admin/doc/index.php, index.php, and base/menu.php under mod/. The NVD entry corroborates the issue a...

CVE-2009-0513

creationtimestamp| type| source ---|---|--- 2009-02-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8025...

CVE-2008-0513

CVE-2008-0513 describes a directory traversal in phpCMS 1.2.2. The vulnerability affects the parser/include/class.cache_phpcms.php and parser/parser.php, allowing remote attackers to read arbitrary files by supplying a path with .. in the file parameter; a proof example notes a filename ending wi...

CVE-2007-0513

CVE-2007-0513 concerns Hitachi HiRDB Datareplicator (and bundled products) where processing certain data can cause CPU exhaustion and a denial of service. Affected versions include HiRDB Datareplicator 7HiRDB, 7(64), 6, 6(64), 5.0, and 5.0(64). The provided sources describe a network-attackable D...

CVE-2006-0513

Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager TAM 5.1 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2006-0513

Concrete details: CVE-2006-0513 affects IBM Tivoli Access Manager Web Server Plug-in (pkmslogout) on TAM 5.1.0.x. The vulnerability is a directory traversal in the filename parameter (e.g., filename=../../../../etc/passwd) that lets an attacker read arbitrary files, requiring authentication to tr...