124 matches found
CVE-2018-1760
Affected software: IBM Rational CLM suite (including CLM, RQM, RTC, DOORS Next Gen, RSM, RSA DM) running 6.0 – 6.0.6.1. Vulnerability: Cross-site scripting in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Root cause ...
Rockwell Automation Pico DeviceNet Interface 1760-DNET Generic
Binary data 752974.prm...
Cisco IOS XE Software Performance Routing Version 3 Denial of Service Vulnerability
According to its self-reported version, Cisco IOS XE Software is affected by following vulnerability - A vulnerability in Performance Routing Version 3 PfRv3 of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload.The vulnerability is due to...
CVE-2019-1760
A vulnerability in Performance Routing Version 3 PfRv3 of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload. The vulnerability is due to the processing of malformed smart probe packets. An attacker could exploit this vulnerability by...
CVE-2019-1760
Cisco IOS XE Software PfRv3 contains a Denial of Service flaw. The issue stems from handling malformed smart probe packets, allowing an unauthenticated remote attacker to trigger a device reload. Impact is DoS due to availability loss. Public technical details are consistent across Cisco advisori...
Security Bulletin: IBM MQ and IBM MQ Appliance could allow a local user to crash the queue manager agent thread and expose some sensitive information (CVE-2017-1760)
Summary Queue manager agent thread crashes with SIGSEGV following execution of valid MQSC command. Vulnerability Details CVEID: CVE-2017-1760 DESCRIPTION: IBM WebSphere MQ could allow a local user to crash the queue manager agent thread and expose some sensitive information. CVSS Base Score: 4 CV...
CVE-2017-1760
IBM WebSphere MQ (IBM MQ) versions 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose sensitive information. Affected products/versions include MQ 7.5.0.0–7.5.0.8, MQ 8.0.0.0–8.0.0.6, MQ 9.0.0.0–9.0.0.1, MQ 9 CD (9.0.1–9.0.3), and MQ Appliance variants. ...
CVE-2016-1760
The XPC Services API in LaunchServices in Apple iOS before 9.3 allows attackers to bypass intended event-handler restrictions and modify an arbitrary app's events via a crafted app...
CVE-2016-1760
CVE-2016-1760 affects iOS LaunchServices XPC Services API prior to iOS 9.3. The vulnerability arises from an event handler validation issue in the XPC Services API, which could allow a crafted app to bypass intended event-handler restrictions and modify events in arbitrary apps. The Apple advisor...
CVE-2015-1760
Microsoft Office and Office Compatibility Pack components are affected by CVE-2015-1760 and related CVEs (CVE-2015-1759, CVE-2015-1770). A remote attacker could execute arbitrary code by convincing a user to open a specially crafted Office file due to improper handling of memory while parsing, le...
KLA10600 Code execution vulnerability in Microsoft Office
Improper memory handling were found in Microsoft Office. By exploiting these vulnerabilities malicious users can execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed file. Original advisories Microsoft Advisory CVE-2015-1759 CVE-2015-1770 CVE-2015-1760...
CVE-2014-1760
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...
CVE-2014-1760
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...
CVE-2014-1760
CVE-2014-1760 concerns multiple memory-corruption vulnerabilities in Microsoft Internet Explorer 11. Reported as a remote-code-execution/denial-of-service class when visiting a crafted web site, with the root cause tied to memory handling in IE’s rendering/parsing paths (e.g., ZDI cites CFormatCa...
Design/Logic Flaw
HP ProCurve Manager PCM 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager IDM 4.0, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to 1 EJBInvokerServlet or 2 JMXInvokerServlet, aka ZDI-CAN-1760. NOTE: this is probably a duplica...
CVE-2013-4810
HP ProCurve Manager PCM 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager IDM 4.0, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to 1 EJBInvokerServlet or 2 JMXInvokerServlet, aka ZDI-CAN-1760. NOTE: this is probably a duplica...
CVE-2013-4810
HP ProCurve Manager (PCM) 3.20/4.0, PCM+ 3.20/4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management are affected. The root cause is a remote code execution vector via a marshalled object to the EJBInvokerServlet or JMXInvokerServlet, enabling an attacker to execute arbitrar...
CVE-2012-1760
Affects: Oracle Siebel CRM 8.1.1 and 8.2.2. Component: UI Framework. Vulnerability (CVE-2012-1760): Difficult to exploit; unauthenticated network attacks via HTTP can lead to a hang or frequent crash (complete DOS). Impact: Partial denial of service to Siebel CRM; no data exfiltration described. ...
Debian Security Advisory DSA 2254-2 (oprofile)
The remote host is missing an update to oprofile announced via advisory DSA 2254-2. OpenVAS Vulnerability Test $Id: deb22542.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2254-2 oprofile Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...