CVE-2016-0942

Technical details for CVE-2016-0942 are not publicly available in the provided documents; monitor for updates from Adobe advisories and related sources.

Oracle: Security Advisory (ELSA-2013-0942)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hardcoded credentials

Basware Banking Maksuliikenne before 8.90.07.X uses a hardcoded password for the ANCO account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 and ADT3 due to...

Design/Logic Flaw

Basware Banking Maksuliikenne before 8.90.07.X stores private keys in plaintext in the SQL database, which allows remote attackers to spoof communications with banks via unspecified vectors. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 due to different vulnerability types...

CVE-2015-0942

...

Apache <= 2.0.52 HTTP GET request Denial of Service Exploit

No description provided by source. !/usr/bin/perl Based on - apache-squ1rt.c exploit. Original credit goes to Chintan Trivedi on the FullDisclosure mailing list: http://seclists.org/lists/fulldisclosure/2004/Nov/0022.html More info - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0942...

CVE-2014-0942

Cross-site scripting XSS vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0941...

Cross site scripting

Cross-site scripting XSS vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0942...

CVE-2014-0942

Cross-site scripting XSS vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2014-0941...

CVE-2014-0942

CVE-2014-0942 is an XSS vulnerability in the IBM Netcool/OMNIbus Web GUI (webtop/eventviewer/eventViewer.jsp) affecting version 7.4.0 before FP2. The flaw lets remote authenticated users inject arbitrary web script or HTML via a crafted URL. The connected records confirm the same issue as CVE-201...

CentOS Update for krb5-devel CESA-2013:0942 centos6

Check for the Version of krb5-devel OpenVAS Vulnerability Test CentOS Update for krb5-devel CESA-2013:0942 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS 5 / 6 : krb5 (CESA-2013:0942)

Updated krb5 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2013-0942

CVE-2013-0942 is an XSS vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for IIS and Web for Apache. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents confirm the affected products and versions and state...

ZDI-12-094 : RealNetworks Helix Server rn5auth Credential Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-094 : RealNetworks Helix Server rn5auth Credential Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-094 June 21, 2012 - -- CVE ID: CVE-2012-0942 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - --...

CVE-2012-0942

CVE-2012-0942 affects RealNetworks Helix Server (and Helix Mobile Server) 14.x prior to 14.3.x. The vulnerability lies in the rn5auth.dll credential parsing path: GetNameValuePair() copies data with strcpy into a stack buffer, causing a stack-based buffer overflow. This allows remote attackers to...

CVE-2010-0942

Directory traversal vulnerability in the jVideoDirect comjvideodirect component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-0942

Joomla! component com_jvideodirect (controller parameter in index.php) is affected by a directory traversal vulnerability. An attacker can use ".." to read arbitrary server files via the Joomla! jVideoDirect module. Root cause: improper validation of the controller parameter allows traversal to s...

CVE-2010-0942

creationtimestamp| type| source ---|---|--- 2010-01-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11089...

SLES9: Security update for apache2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-prefork apache2-worker apache2-devel libapr0 apache2-example-pages apache2-doc apache2 For more information, please visit the referenced security...

CVE-2009-0942

Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets CSS are located in a registered help book, which allows remote attackers to execute arbitrary code via a help: URL that triggers invocation of AppleScript files...