CVE-2017-1885

CVE-2017-1885 is rejected/not used and does not represent an active vulnerability entry.

IBM WebSphere Application Server 7.0 < 7.0.0.39 Multiple Vulnerabilities (FREAK)

Binary data 9700.prm...

CVE-2016-1885

Integer signedness error in the amd64setldt function in sys/amd64/amd64/sysmachdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and 10.2 before p14 allows local users to cause a denial of service kernel panic via an i386setldt system call, which triggers a heap-based buffer overflow...

CVE-2016-1885

CVE-2016-1885 affects FreeBSD on amd64 architectures (notably 10.2-RELENG and earlier 9.3/10.1) through an integer signedness error in the amd64_set_ldt() function used by the i386_set_ldt syscall. The bug can cause a kernel heap overflow when a process manipulates its Local Descriptor Table (LDT...

FreeBSD Kernel amd64_set_ldt Heap Overflow

1. Advisory Information Title: FreeBSD Kernel amd64setldt Heap Overflow Advisory ID: CORE-2016-0005 Advisory URL: Date published: 2016-03-16 Date of last update: 2016-03-14 Vendors contacted: FreeBSD Release mode: Coordinated release 2. Vulnerability Information Class: Unsigned to Signed...

FreeBSD 10.2 amd64 Kernel - amd64_set_ldt Heap Overflow

Exploit for freebsd platform in category dos / poc / 1. Advisory Information Title: FreeBSD Kernel amd64setldt Heap Overflow Advisory ID: CORE-2016-0005 Advisory URL: http://www.coresecurity.com/content/freebsd-kernel-amd64setldt-heap-overflow Date published: 2016-03-16 Date of last update:...

FreeBSD-SA-16:15.sysarch

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:15.sysarch REVISED Security Advisory The FreeBSD Project Topic: Incorrect argument validation in sysarch2 Category: core Module: kernel Announced: 2016-10-25...

CVE-2016-1885

creationtimestamp| type| source ---|---|--- 2016-03-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39570...

CVE-2015-1885

WebSphereOauth20SP.ear in IBM WebSphere Application Server WAS 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vecto...

CVE-2015-1885

CVE-2015-1885 affects IBM WebSphere Application Server: vulnerable when OAuth password grant is used. Affects WebSphere Application Server Full/Profile: 8.5 (Liberty 8.5) up to 8.5.5.x, 8.0 up to 8.0.0.10, and 7.0 up to 7.0.0.38/39. Root cause: OAuth ear (WebSphereOauth20SP.ear) handling allows p...

Oracle Linux 5 : libxml2 (ELSA-2014-1885)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1885 advisory. - CVE-2014-3660 denial of service via recursive entity expansion rhbz1161841 Tenable has extracted the preceding description block directly from the Oracle Linu...

HP-UX PHSS_43889 : s700_800 11.X OV DP7.00 HP-UX IA/PA - Cell Server patch

s700800 11.X OV DP7.00 HP-UX IA/PA - Cell Server patch : Potential security vulnerabilities have been identified with HP Data Protector. These vulnerabilities could be remotely exploited to allow an increase of privilege, create a Denial of Service DoS, or execute arbitrary code. References:...

CVE-2014-1885

The ForzeArmate application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently obtain write access to external-storage resources, by leveraging control over any Google syndication advertising domain...

CVE-2014-1885

The CVE-2014-1885 entry concerns the ForzeArmate Android app. Affected component: the app itself when using Adobe PhoneGap 2.9.0 or earlier. Root cause: attacker-controlled Google syndication advertising domain enables remote JavaScript code execution within the app, which can then obtain write a...

CVE-2013-1885

CVE-2013-1885 affects Red Hat Certificate System (RHCS) 8.1 (and possibly Dogtag Certificate System 9/10) via the pki-tps component. A cross-site scripting flaw allows remote attackers to inject arbitrary web script or HTML by manipulating PATH_INFO (to tus/ or tus/tus/). The issue stems from ins...

CVE-2013-1885

Multiple cross-site scripting XSS vulnerabilities in the token processing system pki-tps in Red Hat Certificate System RHCS 8.1 and possibly Dogtag Certificate System 9 and 10 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 tus/ or 2 tus/tus/...

CVE-2013-2347

The Backup Client Service OmniInet.exe in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXECBAR packet to TCP port 5555, aka ZDI-CAN-1885...

Design/Logic Flaw

The Backup Client Service OmniInet.exe in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXECBAR packet to TCP port 5555, aka ZDI-CAN-1885...

CVE-2013-2347

HP Data Protector Backup Client Service (OmniInet.exe) in HP Data Protector 6.2X is vulnerable to remote command execution via the EXEC_BAR opcode (11) sent to TCP port 5555, enabling an attacker to run arbitrary commands or cause a DoS. Public exploits and proofs of concept exist (e.g., Metasplo...

Ubuntu: Security Advisory (USN-1885-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...