Oracle: Security Advisory (ELSA-2014-0625)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe ColdFusion APSB13-03 Remote Exploit

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'digest/sha1'...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0492-1)

Flash Player has been updated to version 10.3, fixing bugs and security issues. More information can be found on: http://www.adobe.com/support/security/bulletins/apsb11-12.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0492-1)

Flash Player has been updated to version 10.3, fixing bugs and security issues. More information can be found on: http://www.adobe.com/support/security/bulletins/apsb11-12.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

RedHat Update for openssl RHSA-2014:0625-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : openssl (ELSA-2014-0625)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0625 advisory. - fix CVE-2010-5298 - possible use of memory after free - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment - fix CVE-2014-0198 - possible...

ESA-2014-009: RSA BSAFE® SSL-J Multiple Vulnerabilities

ESA-2014-009.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-009: RSA BSAFE® SSL-J Multiple Vulnerabilities EMC Identifier: ESA-2014-009 CVE Identifier: CVE-2011-1473, CVE-2014-0625, CVE-2014-0626, CVE-2014-0627 Severity Rating: CVSS v2 Base Score: See below for individual scores...

CVE-2014-0625

The CVE-2014-0625 issue affects RSA BSAFE SSL-J (JSAFE/JSSE) 5.x before 5.1.3 and 6.x before 6.0.2, where SSLSocket processing during TLS handshakes can buffer application data, leading to memory-based DoS. The SUSE/Security advisory and ESA-2014-009 describe a memory-denial vulnerability in the ...

Adobe ColdFusion APSB13-03 Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'digest/sha1' require 'openssl' class Metasploit...

CVE-2013-0625

creationtimestamp| type| source ---|---|--- 2013-04-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24946 2016-05-12 09:12:03+00:00| seen| MISP/57344868-a120-4004-90f6-4c49950d210f 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04...

Adobe ColdFusion scheduleedit.cfm Authentication Bypass (CVE-2013-0625)

An authentication bypass vulnerability has been reported in ColdFusion servers. The vulnerability is due to enabling unauthenticated attacker to create a scheduled task which will be performed and allow attacker-controlled code to be uploaded to the vulnerable server. A remote attacker could...

CVE-2013-0625

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 are affected by CVE-2013-0625, where an unauthenticated bypass is possible if a password is not configured, potentially enabling remote code execution via unspecified vectors; exploited in the wild in January 2013. (CVSS v2 base 6.8; CVSS v3.1 base 9.8). No ...

CVE-2013-0625

Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, as exploited in the wild in January 2013...

VulnCheck KEV: CVE-2013-0625

Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access...

Adobe ColdFusion 验证绕过漏洞(CVE-2013-0625)

CVE ID:CVE-2013-0625 Adobe ColdFusion是一款高效的网络应用服务器开发环境 Windows, Macintosh和UNIX下的Adobe ColdFusion存在一个安全漏洞，允许未授权用户远程绕过验证控制，控制受影响的服务器。 此漏洞仅影响没有启用密码保护或没有设置密码的ColdFusion客户 0 Adobe ColdFusion 10 Adobe ColdFusion 9.0.2 Adobe ColdFusion 9.0.1 Adobe ColdFusion 9.0 厂商解决方案...

Apple Safari Webkit Multiple Vulnerabilities - March12 (Windows)

The host is installed with Apple Safari web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafariwebkitmultvulnmar12win.nasl 5888 2017-04-07 09:01:53Z teissa $ Apple Safari Webkit Multiple Vulnerabilities - March12 Windows Authors: Rachana Shetty Copyrigh...

Apple Safari Webkit Multiple Vulnerabilities (Mar 2012) - Windows

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

CVE-2012-0625

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0625

WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...

CVE-2012-0625

Technical details for CVE-2012-0625 are not publicly available in the provided documents. Monitor for updates from official advisories; the connected sources do not disclose affected products/versions or remediation .