83 matches found
CVE-2017-0693
CVE-2017-0693 refers to a DoS vulnerability in the Android media framework. Affected products/versions are Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The CNVD entry describes a denial-of-service condition in the Android media framework that an attacker could trigger remotely to cause a DoS. Publi...
CVE-2016-0693
CVE-2016-0693 affects Oracle Solaris 10 and 11.3, specifically the PAM LDAP module within the Solaris component. The Nessus/NASL entries indicate the vulnerability is exploitable remotely over the network by an unauthenticated attacker via multiple protocols, with impact to confidentiality, integ...
CVE-2015-0693
CVE-2015-0693 affects Cisco Web Security Appliance (WSA) devices running 8.5.0-ise-147, where improper handling of the pickle module during tunnel-status checks allows an authenticated, local attacker to execute arbitrary Python code and elevate privileges via a crafted pickle file (Bug CSCut3925...
CVE-2013-0693
CVE-2013-0693 affects ENEA OSE on ROC800 RTUs (ROC800, ROC800L, DL8000) with ROM/kernel versions 3.50/2.30/1.20 and earlier. The issue is a network beacon broadcast by the ROC800 kernel, allowing remote attackers to discover device presence and potentially sensitive information by listening to br...
Emerson ROC800 Multiple Vulnerabilities (Update A)
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-13-259-01 Emerson ROC800 Multiple Vulnerabilities that was published September 26, 2013, on the NCCIC/ICS‑CERT web site. This advisory provides mitigation details for multiple vulnerabilities affecting the Emerson...
CVE-2009-0693
CVE-2009-0693 concerns Wyse Device Manager (WDM) 4.7.x, where multiple buffer overflows allow remote code execution. Specifically, the issues involve HServer (hserver.dll) accepting a crafted User-Agent header and HAgent (hagent.exe) receiving unspecified input leading to overflow. The vulnerabil...
CVE-2012-0693
WHMCS/WHMCompleteSolution 5.03 is affected by CVE-2012-0693: submitticket.php allows remote attackers to inject code into the ticket subject via crafted data, due to improper handling of characters in the subject field. This is a separate issue from CVE-2011-5061. The vendor notes overlap with CV...
SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure
The version of SunSSH running on the remote host has an information disclosure vulnerability. A design flaw in the SSH specification could allow a man-in-the-middle attacker to recover up to 32 bits of plaintext from an SSH-protected connection in the standard configuration. An attacker could...
CVE-2010-0693
creationtimestamp| type| source ---|---|--- 2010-02-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11412...
SLES9: Security update for qt3
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: qt3 qt3-non-mt For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5018833 within...
Wyse Device Manager Buffer Overflow
Wyse Device Manager is installed on the remote system. The installed version is affected by a buffer overflow vulnerability. By sending a specially crafted request to the server, it may be possible for an unauthorized attacker to crash the server or execute arbitrary commands on the remote system...
Gentoo Security Advisory GLSA 200408-20 (Qt)
The remote host is missing updates announced in advisory GLSA 200408-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Ports: qt
The remote host is missing an update to the system as announced in the referenced advisory. VID ebffe27a-f48c-11d8-9837-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: qt
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-0693
CVE-2008-0693 : A stack-based buffer overflow in PQCore.exe within Print Manager Plus 2008 Client Billing and Authentication 7.0.127.16 can be triggered by a sequence of long TCP packets to port 48101, allowing remote attackers to cause a denial-of-service (service outage). Publicly disclosed det...
Debian Security Advisory DSA 382-2 (ssh)
The remote host is missing an update to ssh announced via advisory DSA 382-2. OpenVAS Vulnerability Test $Id: deb3822.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 382-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 382-2 (ssh)
The remote host is missing an update to ssh announced via advisory DSA 382-2. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Debian Security Advisory DSA 382-3 (ssh)
The remote host is missing an update to ssh announced via advisory DSA 382-3. OpenVAS Vulnerability Test $Id: deb3823.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 382-3 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
CVE-2007-0693
CVE-2007-0693 corresponds to an SQL injection in DGNews 2.1, impacting the news.php component (newslist action) via the catid parameter and with note of possible cross-site scripting. The provided documents do not list a vendor patch or fixed version. CVSS-like metrics exist in the initial record...
DGNews version 2.1 SQL Injection Vulnerability
netVigilance Security Advisory 22 DGNews version 2.1 SQL Injection Vulnerability Description: DGNews is small and simple but powered news publishing. Easy installation, no programing required. But you can still change whatever you want for advanced users. Features: add unlimited categories,...