CVE-2015-2043

CVE-2015-2043 affects Visualware MyConnection Server

Procentia IntelliPen 1.1.12.1520 (Data.aspx, value param) - Blind SQL Injection

CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker ...

CVE-2014-2043 - SQL Injection in Procentia IntelliPen

Vulnerability title: SQL Injection in Procentia IntelliPen CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an authenticated user....

CVE-2013-2043

apps/calendar/ajax/events.php in ownCloud before 4.5.11 and 5.x before 5.0.6 does not properly check the ownership of a calendar, which allows remote authenticated users to download arbitrary calendars via the calendarid parameter...

CVE-2013-2043

CVE-2013-2043 affects ownCloud calendar handling: the script apps/calendar/ajax/events.php fails to properly verify calendar ownership, enabling remote authenticated users to download arbitrary calendars via the calendar_id parameter. Affected versions are ownCloud before 4.5.11 and 5.x before 5....

CVE-2014-2043

Summary: CVE-2014-2043 affects Procentia’s IntelliPen (vendor Procentia), specifically the Data.aspx path in the Resources/System/Templates/Data.aspx page. Affected version: 1.1.12.1520 (and likely related builds prior to 1.1.18.1658). Root cause: SQL injection due to the unsanitised use of the v...

Procentia IntelliPen 1.1.12.1520 - data.aspx Blind SQL Injection

Procentia IntelliPen 1.1.12.1520 - data.aspx Blind SQL Injection CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an authenticated...

Procentia IntelliPen 1.1.12.1520 - 'data.aspx' Blind SQL Injection

CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an authenticated user. A successful attack could allow an authenticated attacker ...

Procentia IntelliPen 1.1.12.1520 SQL Injection

Vulnerability title: SQL Injection in Procentia IntelliPen CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the software as an authenticated user....

Procentia IntelliPen 1.1.12.1520 - Blind SQL Injection Vulnerability

Procentia IntelliPen version 1.1.12.1520 suffers from a remote SQL injection vulnerability. CVE: CVE-2014-2043 Vendor: Procentia Product: IntelliPen Affected version: 1.1.12.1520 Fixed version: 1.1.18.1658 Reported by: Jerzy Kramarz Details: SQL injection has been found and confirmed within the...

CVE-2014-2043

creationtimestamp| type| source ---|---|--- 2014-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32212...

Ubuntu 12.10 : linux vulnerabilities (USN-2043-1)

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. CVE-2013-4299 Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmenttation Offload UFO. An unprivileged...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2043)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2043 advisory. - hugepages: fix use after free bug in 'quota' handling Orabug: 15845276 CVE-2012-2133 - udf: Fortify loading of sparing table Orabug: 15845302...

Privilege escalation in the calendar application - ownCloud

Due to not properly checking the ownership of an calendar, an authenticated attacker is able to download calendars of other users via the "calendarid" GET parameter to /apps/calendar/ajax/events.php Note: Successful exploitation of this privilege escalation requires the "calendar" app to be enabl...

Memory corruption

Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2045, and CVE-2012-2047...

Memory corruption

Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2045, and CVE-2012-2046...

Memory corruption

Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2043, CVE-2012-2044, CVE-2012-2046, and CVE-2012-2047...

CVE-2012-2043

CVE-2012-2043 affects Adobe Shockwave Player prior to 11.6.6.636. The flaw allows attackers to execute arbitrary code or cause a memory corruption-based denial of service via unspecified vectors, as part of a set of CVEs (2043–2047). The cited NVD entry lists a base score of 10.0 (HIGH) with netw...

CVE-2012-2043

Adobe Shockwave Player before 11.6.6.636 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2044, CVE-2012-2045, CVE-2012-2046, and CVE-2012-2047...

Debian: Security Advisory (DSA-2043-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...