111 matches found
[security bulletin] HPSBMA02548 SSRT100126 rev.1 - HP Insight Orchestration for Windows, Remote Unauthorized Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02280158 Version: 1 HPSBMA02548 SSRT100126 rev.1 - HP Insight Orchestration for Windows, Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon ...
CVE-2010-1965
HP Insight Orchestration for Windows before version 6.1 is affected by CVE-2010-1965, a remote unauthorized access vulnerability allowing reading or modification of data. The HP security bulletin states the issue is fixed in HP Insight Orchestration v6.1 and later; patch accordingly to remediate....
CVE-2009-1965
CVE-2009-1965 affects Oracle Database Net Foundation Layer in 9.2.0.8 and 10.1.0.5. The vulnerability can be exploited remotely over the network via adjacent access, leading to partial confidentiality, integrity, and availability impacts. The Oracle October 2009 Critical Patch Update provides fix...
CVE-2009-1965
Unspecified vulnerability in the Net Foundation Layer component in Oracle Database 9.2.0.8 and 10.1.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...
IBM Lotus Expeditor cai URI Handler Command Execution (CVE-2008-1965)
IBM Lotus Expeditor is a software framework for the development, integration and deployment of client applications. The framework include components that run on desktop computers, handheld devices, and management servers. There exist a buffer overflow vulnerability in IBM Lotus Symphony and Lotus...
CVE-2008-1965
IBM Lotus Expeditor's cai: URI handler in rcplauncher (used by Lotus Expeditor Client for Desktop 6.1.1/6.1.2 and Lotus Symphony) is vulnerable: a crafted cai: URI can inject -launcher to rcplauncher.exe, enabling remote code execution with the user's privileges. The attack relies on loading a sp...
CVE-2008-1965
creationtimestamp| type| source ---|---|--- 2008-04-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31706...
CVE-2007-1965
CVE-2007-1965 describes multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS versions up to 2.0.4.3 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the set_lang parameter to (1) archive.php, (2) article.php, (3) index.php, or (4) topics.php. Ex...
CVE-2006-1965
CVE-2006-1965 affects aasi media Net Clubs Pro versions 4.0 and earlier. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via parameters in various CGI scripts: (a) sendim.cgi (parameters onuser, pass, chatsys, room,...
CVE-2002-1965
CVE-2002-1965 affects Imatix Xitami 2.5b4 and 2.5b5 due to a Cross-site scripting (XSS) flaw in Errors.gsl. The vulnerability allows remote attackers to inject arbitrary script/HTML via (1) Javascript events in an IMG SRC tag (onerror demonstrated) or (2) the User-Agent header in a GET request. A...
