118 matches found
JVN#06372244: Multiple vulnerabilities in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE
EC-CUBE Payment Module and GMO-PG Payment Module PG Multi-Payment Service, which are additional modules for EC-CUBE, provided by GMO Payment Gateway, Inc. contain multiple vulnerabilities listed below. Cross-site scripting vulnerability in the management screen CWE-79 - CVE-2018-0657 Version|...
CVE-2011-0657
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/windows/llmnr/ms11030dnsapi.rb 2024-02-25 13:47:10+00:00| seen| Telegram/kQzbN5BOlLuINFNNqS6BTGg9O7DfSY4uRwuAnFNcXsjwskc 2025-02-06...
CVE-2001-0657
CVE-2001-0657 entry is rejected/not used; not an active vulnerability record.
Ubuntu: Security Advisory (USN-2954-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle MySQL Server 5.7 <= 5.7.11 Security Update (cpuapr2016v3, cpujul2016) - Linux
Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle MySQL Server 5.7 <= 5.7.11 Security Update (cpuapr2016v3, cpujul2016) - Windows
Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-0657
Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidentiality via vectors related to JSON...
CVE-2016-0657
CVE-2016-0657 affects Oracle MySQL Server 5.7.11 and earlier, with a vulnerability in the JSON component that can lead to partial confidentiality disclosure by a local attacker. Credible sources (NVD entry and vendor advisories) indicate this is a local, low-privilege disclosure via the JSON path...
CVE-2015-0657
Cisco IOS XR allows remote attackers to cause a denial of service RSVP process reload via a malformed RSVP packet, aka Bug ID CSCur69192...
CVE-2015-0657
CVE-2015-0657 affects Cisco IOS XR. A remote attacker can cause a denial of service by sending a malformed RSVP packet, triggering an RSVP process reload (Bug ID CSCur69192). The connected documents confirm this is a Cisco IOS XR vulnerability; no additional exploit details or remediation are pro...
CVE-2014-0657
The administration portal in Cisco Unified Communications Manager Unified CM 9.11 and earlier does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control via multiple visits to a forbidden portal URL, aka Bug ID CSCuj83540...
CVE-2014-0657
CVE-2014-0657 affects Cisco Unified Communications Manager (Unified CM) administration portal (9.1(1) and earlier). The issue is insufficient role restriction processing, allowing a remote, authenticated attacker to bypass role-based access by revisiting a previously denied portal URL, potentiall...
Schneider Electric IGSS Buffer Overflow
Overview Independent researcher Aaron Portnoy of Exodus Intelligence has identified a buffer overflow vulnerability in Schneider Electric’s Interactive Graphical SCADA System IGSS application. Schneider Electric has produced a patch that fully resolves this vulnerability. Aaron Portnoy has...
Schneider Electric Interactive Graphical SCADA System Buffer Overflow - Improved Performance (CVE-2013-0657)
An buffer overflow vulnerability has been reported in Schneider Electric's Interactive Graphical SCADA System IGSS application. The vulnerability is due to an integer underflow that leads to a stack buffer overflow when processing crafted input sent to ports 12397/TCP and 12399/TCP...
Schneider Electric Interactive Graphical SCADA System Buffer Overflow (CVE-2013-0657)
A buffer overflow vulnerability exists in Schneider Electric's Interactive Graphical SCADA System IGSS application. The vulnerability is due to an integer underflow that leads to a stack buffer overflow when processing crafted input sent to ports 12397/TCP and 12399/TCP...
Moderate: Red Hat Security Advisory: openstack-nova security, bug fix, and enhancement update
Updated openstack-nova packages that fix two security issues, several bugs, and add an enhancement are now available for Red Hat OpenStack Folsom. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whi...
Sun Java JRE Applet Handling Privilege Escalation (231261) (Unix)
The version of Sun Java Runtime Environment JRE installed on the remote host reportedly contains two vulnerabilities that may independently allow an untrusted application or applet to elevate its privileges by, for example, granting itself permission to read and write local files or execute local...
Schneider Electric Interactive Graphical SCADA System Data Collector Overflow
Added: 02/11/2013 CVE: CVE-2013-0657 BID: 57449 OSVDB: 89324 Background Schneider Electric Interactive Graphical SCADA System IGSS is a supervisory control and data acquisition SCADA system designed to monitor and control industrial processes. The Data Collector DC.exe component listens on port...
Schneider Electric Interactive Graphical SCADA System Data Collector Overflow
Added: 02/11/2013 CVE: CVE-2013-0657 BID: 57449 OSVDB: 89324 Background Schneider Electric Interactive Graphical SCADA System IGSS is a supervisory control and data acquisition SCADA system designed to monitor and control industrial processes. The Data Collector DC.exe component listens on port...