CVE-2018-0658

CVE-2018-0658 concerns input validation bypass in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service). Affected: EC-CUBE Payment Module (2.12) up to version 3.5.23 and earlier; EC-CUBE Payment Module (2.11) up to 2.3.17 and earlier; GMO-PG Payment Module (PG Multi-Payment ...

JVN#06372244: Multiple vulnerabilities in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE

EC-CUBE Payment Module and GMO-PG Payment Module PG Multi-Payment Service, which are additional modules for EC-CUBE, provided by GMO Payment Gateway, Inc. contain multiple vulnerabilities listed below. Cross-site scripting vulnerability in the management screen CWE-79 - CVE-2018-0657 Version|...

Cisco NX-OS Software DHCP Options Command Injection Vulnerability (Cisco-SA-20150327-CVE-2015-0658)

A vulnerability in DHCP code used with PowerOn Auto Provisioning POAP of Cisco NX-OS could allow an unauthenticated, adjacent attacker to inject arbitrary commands into the Cisco NX-OS device. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

Oracle MySQL Server 5.7 <= 5.7.10 Security Update (cpuapr2016v3) - Linux

Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-0658

Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Optimizer...

CVE-2016-0658

Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Optimizer...

CVE-2016-0658

CVE-2016-0658 affects Oracle MySQL Server 5.7.10 and earlier. The vulnerability is in the Optimizer subcomponent and allows a local attacker to cause a denial of service, impacting availability. The initial description does not specify affected versions beyond “5.7.10 and earlier” or provide a pa...

Oracle: Security Advisory (ELSA-2008-0110)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco NX-OS DHCP POAP Command Injection Vulnerability

The remote Cisco device is running a version of NX-OS software that is affected by a command injection vulnerability due to the PowerOn Auto Provisioning POAP feature not properly validating the DHCP options returned by POAP. An attacker on an adjacent network, using crafted DHCP packets, can...

CVE-2015-0658

Cisco NX-OS POAP DHCP Options Command Injection (CVE-2015-0658). The POAP DHCP initialization validation is insufficient, allowing an adjacent attacker to send crafted DHCP packets and execute arbitrary commands as root on the affected device. Impact is remote code execution with root privileges ...

Adobe - JBIG2Decode Memory Corruption Exploit (2)

No description provided by source. $Id: adobejbig2decode.rb 10477 2010-09-25 11:59:02Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

CVE-2014-0658

CVE-2014-0658 affects Cisco 9900 Series Unified IP Phones . The issue arises in SIP header processing, where a crafted SIP header can cause the device to unregister, producing a denial-of-service condition. Public sources consistently identify the vulnerability as CSCul24898. Exploitation details...

Schneider Electric Accutech Manager HTTP Request Processing Buffer Overflow (CVE-2013-0658)

A buffer overflow vulnerability has been reported in Schneider Electric Accutech Manager...

CVE-2013-0658

CVE-2013-0658 is a heap-based buffer overflow in Schneider Electric Accutech Manager’s RFManagerService.exe affecting version 2.00.1 and earlier. By sending an HTTP request to ports 2537/TCP, an attacker could remotely exploit the vulnerability to execute arbitrary code with administrator privile...

CVE-2013-0658

creationtimestamp| type| source ---|---|--- 2013-02-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24474...

Scientific Linux Security Update : openldap on SL4.x, SL5.x i386/x86_64

These updated openldap packages fix a flaw in the way the OpenLDAP slapd daemon handled modify and modrdn requests with NOOP control on objects stored in a Berkeley DB BDB storage backend. An authenticated attacker with permission to perform modify or modrdn operations on such LDAP objects could...

QuickTime < 7.7.2 Multiple Vulnerabilities

Binary data 6489.prm...

Mac OS X Multiple Vulnerabilities (2012-002)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. OpenVAS Vulnerability Test $Id: gbmacosxsu12-002.nasl 6521 2017-07-04 14:51:10Z cfischer $ Mac OS X Multiple Vulnerabilities 2012-002 Authors: Madhuri D Copyright: Copyright c...

Mac OS X Multiple Vulnerabilities (2012-002)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2012-0658

CVE-2012-0658 is a QuickTime flaw in Mac OS X prior to 10.7.4 where a buffer overflow in QuickTime’s handling of audio sample tables during progressive download could allow remote code execution or cause an application crash. The underlying issue is a buffer overflow in the movie file processing ...