CVE-2016-0895

CVE-2016-0895 affects EMC RSA Data Loss Prevention 9.6 before SP2 P5, where remote attackers can trigger clickjacking via web-site elements with crafted transparency/opacity. The connected sources confirm the product/version and the vulnerability class but do not provide exploitation details or c...

Oracle: Security Advisory (ELSA-2015-0895)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0895

Cross-site request forgery CSRF vulnerability in the All In One WP Security & Firewall plugin before 3.9.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete logs of 404 aka Not Found HTTP status codes...

CVE-2015-0895

All In One WP Security & Firewall for WordPress (versions before 3.9.0) is affected by a CSRF vulnerability that can allow an attacker, while a logged-in admin exists, to hijack the administrator’s authentication to delete 404 logs via forged requests. Root cause is CSRF in the plugin; impact inc...

IBM SPSS SamplePower vsflex8l ActiveX控件缓冲区溢出漏洞

CVE ID：CVE-2014-0895 IBM SPSS SamplePower是美国IBM公司的一套统计分析软件。 IBM SPSS SamplePower vsflex8l ActiveX控件中存在缓冲区溢出漏洞。远程攻击可借助特制的ComboList属性值利用该漏洞执行任意代码。 0 IBM SPSS SamplePower 3.0.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www-01.ibm.com/support/docview.wss?uid=swg21666790...

CVE-2014-0895

IBM SPSS SamplePower 3.0.1 (Windows) is affected by CVE-2014-0895 due to a buffer overflow in the vsflex8l ActiveX control’s ComboList property, enabling remote code execution. The vulnerability affects the ActiveX control shipped with SamplePower 3.0.1 before FP1 3.0.1-IM-S3SAMPC-WIN32-FP001-IF0...

KLA10207 ACE vulnerability in IBM SPSS SamplePower

A buffer overflow was found in the IBM SPSS SamplePower. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed ComboList. Original advisories - Related products IBM-SPSS-SamplePower CVE list CVE-2014-0895...

CVE-2013-0895

Google Chrome/Crome-derived browser on Linux and macOS has CVE-2013-0895 (and related 2013-08x family) due to Incorrect path handling in file copying. OpenSUSE openSUSE-SU-2013:0454-1 documents this CVE as a High-severity issue and notes a fix in the Chromium update path, with the 27.x line addre...

CVE-2012-0895

The CVE-2012-0895 issue affects the WordPress Count Per Day plugin; XSS vulnerability in map/map.php can be triggered via the map parameter and is present in versions before 3.1.1. Remediation: upgrade to version 3.1.1 or later. If upgrading is not possible, apply vendor advisories/workarounds fr...

CVE-2012-0895

Cross-site scripting XSS vulnerability in map/map.php in the Count Per Day module before 3.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map parameter...

CVE-2012-0895

creationtimestamp| type| source ---|---|--- 2012-01-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18355...

CVE-2011-0895

HP Network Node Manager i (NNMi) versions 9.0x and 8.1x are affected by CVE-2011-0895, a remote information disclosure vulnerability exploitable by a remote authenticated user via unknown vectors. The HP Security Bulletin HPSBMA02652/SSRT100432 rev.2 confirms the base score of 4.0 (CVSS 2.0) and ...

CVE-2011-0895

Unspecified vulnerability in HP Network Node Manager i NNMi 9.0x and 8.1x allows remote authenticated users to obtain sensitive information via unknown vectors...

[security bulletin] HPSBMA02652 SSRT100432 rev.2 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02776387 Version: 2 HPSBMA02652 SSRT100432 rev.2 - HP Network Node Manager i NNMi for HP-UX, Linux, Solaris, and Windows, Remote Information Disclosure NOTICE: The information in this Security...

CVE-2010-0895

Technical details (vulnerability type, affected versions, root cause, impact, or remediation) are not provided in the connected documents. Monitor for updates for concrete information.

Novell eDirectory NDS Verb Integer Overflow (CVE-2009-0895)

Novell eDirectory is a Lightweight Directory Access Protocol LDAP directory-based identity management system that centralizes the management of user identities, access privileges and many other network resources. An integer overflow was identified in Novell eDirectory. The vulnerability is due to...

CVE-2009-0895

The CVE-2009-0895 vulnerability affects Novell eDirectory 8.7.3.x (pre-8.7.3.10 ftf2) and 8.8.x (pre-8.8.5.2). It is caused by an integer overflow in processing NDS Verb 0x1 requests, leading to a heap-based buffer overflow that enables remote code execution. Public sources in the connected docum...

CVE-2009-0895

Integer overflow in Novell eDirectory 8.7.3.x before 8.7.3.10 ftf2 and 8.8.x before 8.8.5.2 allows remote attackers to execute arbitrary code via an NDS Verb 0x1 request containing a large integer value that triggers a heap-based buffer overflow...

CVE-2008-0895

CVE-2008-0895 affects BEA WebLogic Server and WebLogic Express 6.1–10.0. The vulnerability permits remote attackers to bypass authentication for application servlets by sending crafted request headers. The issue is documented across multiple sources (NVD, CVE lists) and is characterized by an aut...

Solaris 10 (x86) : 124245-02

SunOS 5.10x86: /usr/bin/rm patch. Date this patch was last updated by Sun : Jun/20/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...