Oracle GlassFish Enterprise Server REST Interface Cross Site Request Forgery (CVE-2012-0550)

A cross-site request forgery CSRF vulnerability has been reported in the GlassFish HTTP administration interface...

CVE-2012-0550

Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Web Container...

CVE-2012-0550

CVE-2012-0550 refers to a CSRF vulnerability in Oracle GlassFish Server 3.1.1 (GlassFish Enterprise Server), specifically affecting the REST interface/Web Container components. The issue is described in sources (e.g., CPAI-2012-386) as a REST interface CSRF vulnerability, with OpenVAS noting Glas...

Symantec Endpoint Protection Manager Cross-Site Request Forgery and Cross-Site Scripting

SUMMARY Symantec Endpoint Protection Manager 12.1 web console is susceptible to cross-site scripting and cross-site request forgery that could potentially lead to arbitrary code execution. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symantec Endpoint Protection | 12.1 ...

CVE-2011-0550

Symantec Endpoint Protection Manager (SEP) Web Interface (SEP 11.0 RU6/11.0 RU6-based) is affected by cross-site scripting (XSS) in the Web UI, specifically via the token parameter in portal/Help.jsp or via the URI in console/apps/sepm. Multiple OpenVAS/Nessus entries corroborate XSS; Nessus addi...

CVE-2008-0550

creationtimestamp| type| source ---|---|--- 2010-06-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16800 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/steamcastuseragent.rb 2025-02-06 03:13:38+00:00|...

Streamcast 0.9.75 - HTTP User-Agent Buffer Overflow (Metasploit)

$Id: steamcastuseragent.rb 9488 2010-06-11 16:12:05Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-0550

The CVE-2010-0550 entry affects Geo++ GNCASTER 1.4.0.7 and earlier. The root issue is a faulty enforcement of HTTP Digest Authentication, allowing remote authenticated users to fall back to HTTP Basic Authentication and bypass the intended server policy. The connected sources confirm the affected...

Microsoft Windows HTTP Services Credential Reflection Code Execution (MS09-013; CVE-2009-0550)

Windows HTTP Services WinHTTP provides developers with an HTTP client application programming interface API to send requests through the HTTP protocol to other HTTP servers. A remote code execution vulnerability has been reported in the way Microsoft Windows HTTP Services handles NTLM credentials...

Streamcast HTTP User-Agent Buffer Overflow

This module exploits a stack buffer overflow in Streamcast 'Streamcast HTTP User-Agent Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in Streamcast 'LSO ', Original exploit module 'aushack' Added references and check code. Default target to XP. , 'License' =...

Fedora Core 10 FEDORA-2009-0550 (amarok)

The remote host is missing an update to amarok announced via advisory FEDORA-2009-0550. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2008-0550

CVE-2008-0550 corresponds to a vulnerability in Streamcast

Debian Security Advisory DSA 423-1 (kernel-image-2.4.17-ia64)

The remote host is missing an update to kernel-image-2.4.17-ia64 announced via advisory DSA 423-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Debian Security Advisory DSA 423-1 (kernel-image-2.4.17-ia64)

The remote host is missing an update to kernel-image-2.4.17-ia64 announced via advisory DSA 423-1. OpenVAS Vulnerability Test $Id: deb4231.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 423-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-0550

The CVE-2007-0550 entry concerns a Cross-Site Scripting (XSS) vulnerability in the search.php component of 212cafeBoard 0.08 Beta. The flaw allows remote attackers to inject arbitrary web script or HTML via the keyword parameter, as documented by the NVD entry with CVSS 2.0 base score 6.8 (Medium...

CVE-2006-0550

Buffer overflow in an unspecified Oracle Client utility might allow remote attackers to execute arbitrary code or cause a denial of service. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue h...

CVE-2006-0550

Technical details for CVE-2006-0550 are not publicly available in the provided documents. The Oracle advisory details are insufficient to confirm affected product/version or a fix; monitor for updates.

CVE-2005-0550

CVE-2005-0550 describes a buffer overflow in Microsoft Windows Object Management handling that could be exploited locally to cause a denial of service (system crash). Affected products include Windows 2000, Windows XP (SP1 and SP2), and Windows Server 2003. The underlying issue is an unchecked bu...

Debian DSA-087-1 : wu-ftpd - remote root exploit

CORE ST reports that an exploit has been found for a bug in the wu-ftpd glob code this is the code that handles filename wildcard expansion. Any logged in user including anonymous FTP users can exploit the bug to gain root privileges on the server. %NASLMINLEVEL 70300 C Tenable Network Security,...

Mandrake Linux Security Advisory : wu-ftpd (MDKSA-2001:090)

A vulnerability in wu-ftpd's ftpglob function was found by the CORE ST team. This vulnerability can be exploited to obtain root access on the FTP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake Linux...