CVE-2018-1392

IBM Financial Transaction Manager for ACH Services (Multi-Platform) versions 3.0.4 and 3.1.0 are affected by CVE-2018-1392 due to an input validation vulnerability in the web services component. An authenticated user could trigger a specially crafted command to obtain sensitive information. The C...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2016-1392)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-1392 advisory. 45.2-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 45.2-1 - Update to 45.2 45.1.1-1 - Update to 45.1.1...

RedHat Update for thunderbird RHSA-2016:1392-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Prime Collaboration Assurance 10.5.x / 10.6.x / 11.0.x / 11.1.x < 11.1.66527 Open Redirect (cisco-sa-20160503-pca)

According to its self-reported version number, the remote Cisco Prime Collaboration Assurance device is 10.5.x, 10.6.x, 11.0.x, or 11.1.x prior to 11.1.66527. It is, therefore, affected by an open redirect vulnerability in the web interface component due to improper sanitization of user-supplied...

CVE-2016-1392

Cisco Prime Collaboration Assurance Software versions 10.5–11.0 suffer an open redirect vulnerability in the web interface due to improper input validation of HTTP request parameters. An unauthenticated, remote attacker could entice a user to click a crafted link and redirect them to a malicious ...

Oracle: Security Advisory (ELSA-2011-1392)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2014-1392)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1392

Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-1392

Aruba Networks CPPM (ClearPass Policy Manager) is affected by CVE-2015-1392. The connected sources describe multiple SQL injection vulnerabilities in CPPM prior to version 6.4.5 that allow remote administrators to execute arbitrary SQL commands via unspecified vectors. The root cause is SQL injec...

Oracle Linux 6 : kernel (ELSA-2014-1392)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1392 advisory. - kernel futex: Fix errors in nested key ref-counting Denys Vlasenko 1094458 CVE-2014-0205 Tenable has extracted the preceding description block direct...

RedHat Update for kernel RHSA-2014:1392-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 5 : thunderbird (RHSA-2009:1126)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2009:1126 advisory. - Firefox 2 and 3 Layout engine crash CVE-2009-1303 - Firefox 2 and 3 JavaScript engine crash CVE-2009-1305 - Firefox jar: scheme ignores th...

RHEL 6 : java-1.6.0-sun (RHSA-2012:1392)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1392 advisory. Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update fixes severa...

Slackware Advisory SSA:2009-176-01 seamonkey

The remote host is missing an update as announced via advisory SSA:2009-176-01. OpenVAS Vulnerability Test $Id: esoftslkssa200917601.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Scientific Linux Security Update : thunderbird on SL4.x, SL5.x i386/x86_64

Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running Thunderbird. CVE-2009-1392, CVE-2009-1303, CVE-2009-1305, CVE-2009-1833,...

Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey. CVE-2009-1392, CVE-2009-1833, CVE-2009-1838, CVE-2009-1841 A flaw was found in the...

CentOS Update for httpd CESA-2011:1392 centos4 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Code injection

Unspecified vulnerability in HP Data Protector Express aka DPX 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1392...

Ubuntu Update for linux-fsl-imx51 USN-1392-1

Ubuntu Update for Linux kernel vulnerabilities USN-1392-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13921.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-fsl-imx51 USN-1392-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

CVE-2012-1392

Dolphin Browser HD for Android (versions 6.2.0, 7.2.1, 7.3.0, 7.4.0) is associated with CVE-2012-1392. Kaspersky (KLA10139) describes an unspecified vulnerability that could allow arbitrary code execution when exploited via an unknown vector. The Red Hat/NVD/PRION entries confirm an unspecified v...