Security Bulletin: Control Access issues in PCOMM

Summary There is a vulnerability in IBM Person CommunicationsPCOMM . Person Communications has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2023-37410 DESCRIPTION: IBM Personal Communications could allow a local user to escalate their privileges to the SYSTEM user due to overly...

Dolibarr vulnerable to Improper Validation of Specified Quantity in Input

Dolibarr 14.0.5 and prior versions are vulnerable to Improper Validation of Specified Quantity in Input...

GHSA-F768-8PVQ-MM6R Dolibarr vulnerable to Improper Validation of Specified Quantity in Input

Dolibarr 14.0.5 and prior versions are vulnerable to Improper Validation of Specified Quantity in Input...

CVE-2014-8315

polestarxml.jsp in SAP BusinessObjects Explorer 14.0.5 build 882 replies with different timing depending on if a connection can be made, which allows remote attackers to conduct port scanning attacks via a host name and port in the cms parameter...

RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Aug11

This host is installed with RealPlayer which is prone to multiple vulnerabilities OpenVAS Vulnerability Test $Id: secpodrealplayermultvulnwin01aug11.nasl 7015 2017-08-28 11:51:24Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Windows - Aug11 Authors: Rachana Shetty Copyright: Copyrigh...

Design/Logic Flaw

Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-2947

Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zone via a local HTML document...