CVE-2016-0680

CVE-2016-0680 affects Oracle PeopleSoft Products 9.1 and 9.2, specifically the Services Procurement subcomponent of the PeopleSoft Enterprise SCM suite. A security vulnerability exists that can be exploited by a remote authenticated user to read, update, insert, or delete data, thereby compromisi...

CVE-2015-0680

Cisco Unified Call Manager (CM) 9.1(2.1000.28) is affected by an arbitrary file-read vulnerability caused by improper restriction of resource requests. An authenticated, remote attacker could read arbitrary files on the targeted device via unspecified vectors. This requires authentication, mitiga...

CVE-2014-0680

Cross-site scripting XSS vulnerability in the HTTP control interface in the NAC Web Agent component in Cisco Identity Services Engine ISE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCui15038...

CVE-2014-0680

Cisco Identity Services Engine (ISE) NAC Web Agent’s HTTP control interface is affected by a Cross-Site Scripting (XSS) vulnerability. The issue arises from insufficient input validation, allowing remote attackers to inject arbitrary scripts via a crafted URL. Exploitation could cause a user to e...

Cogent DataHub HTTP Server Buffer Overflow

This module exploits a stack based buffer overflow on Cogent DataHub 7.3.0. The vulnerability exists in the HTTP server. While handling HTTP headers, a strncpy function is used in a dangerous way. This module has been tested successfully on Cogent DataHub 7.3.0 Demo on Windows XP SP3. This module...

Oracle Linux 4 : gnutls (ELSA-2006-0680)

From Red Hat Security Advisory 2006:0680 : Updated gnutls packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The GnuTLS Library provides support for cryptographi...

CVE-2013-0680

Stack-based buffer overflow in the web server in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allows remote attackers to cause a denial of service daemon crash or possibly execute...

CVE-2013-0680

Stack-based buffer overflow in the web server in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allows remote attackers to cause a denial of service daemon crash or possibly execute...

CVE-2013-0680

CVE-2013-0680 is a stack-based buffer overflow in Cogent Real-Time Systems’ DataHub web server that affects Cogent DataHub < 7.3.0, OPC DataHub < 6.4.22, Cascade DataHub for Windows < 6.4.22, and DataHub QuickTrend

Apple Safari < 6.0 安全限制绕过漏洞(CVE-2012-0680)

BUGTRAQ ID: 54688 CVE ID: CVE-2012-0680 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Apple Safari 6.0之前版本没有正确处理密码输入元素的autocomplete属性，在实现存在安全限制绕过漏洞，攻击者可利用此漏洞通过无人监视的工作站绕过身份验证。 0 Apple Safari 6.0 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...

CVE-2012-0680

CVE-2012-0680 affects Apple Safari on macOS prior to 6.0. The vulnerability arises from improper handling of the password input element’s autocomplete attribute, allowing a remote attacker to bypass authentication on an unattended workstation. The issue specifically concerns password fields that ...

CVE-2011-0680

The CVE affects Android’s Mms component. data/WorkingMessage.java in the Mms app on Android versions before 2.2.2 and on 2.3.x before 2.3.2 fails to properly manage the draft SMS cache, allowing remote attackers to read SMS messages intended for other recipients under certain conditions via the s...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2010-0680

CVE-2010-0680 – ZeusCMS 0.2: A directory traversal in index.php allows remote attackers to include and execute arbitrary local files via the page parameter. This can impact confidentiality, integrity, and availability (CVSS v2 base score 7.5). Affected product/version: ZeusCMS 0.2. Connected reco...

CVE-2010-0680

creationtimestamp| type| source ---|---|--- 2010-02-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11437...

CVE-2009-0680

CVE-2009-0680 affects the Netgear SSL312 web interface. The vulnerability is in cgi-bin/welcome/VPN_only and allows remote attackers to cause a denial of service (device crash) via a crafted query string, demonstrated using directory traversal sequences. The NVD entry lists a network attack vecto...

Fedora Update for vdccm FEDORA-2008-0680

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for synce-gnome FEDORA-2008-0680

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for librapi FEDORA-2008-0680

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for synce-sync-engine FEDORA-2008-0680

Check for the Version of synce-sync-engine OpenVAS Vulnerability Test Fedora Update for synce-sync-engine FEDORA-2008-0680 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...