CVE-2013-2095

rubygem-openshift-origin-controller: API can be used to create applications via cartridgecache.rb URI.prase to perform command injection...

CVE-2013-2095

rubygem-openshift-origin-controller: API can be used to create applications via cartridgecache.rb URI.prase to perform command injection...

CVE-2013-2095

CVE-2013-2095 affects rubygem openshift-origin-controller. The vulnerability allows command injection through the API by crafting a cartridge_cache.rb URI.parse() payload to create applications. PoC demonstrates the exploit; multiple advisories confirm the issue. Remediation: there is no fixed ve...

PRODSECBUG-2095: Defense-in-depth session validation check implemented

More info at https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33...

CVE-2019-2095

CVE-2019-2095 affects Android 9 (Pie) with a race condition in SkPixelRef.cpp leading to a use-after-free and potential remote code execution. The vulnerability is triggered via callGenIDChangeListeners and related paths; exploitation requires user interaction. The Android Security Bulletin (June...

CVE-2018-2095

...

CVE-2018-2095

CVE-2018-2095 is rejected and does not represent an active vulnerability entry.

CVE-2017-2095

CVE-2017-2095 affects Cybozu Garoon 3.0.0 to 4.2.3. A remote authenticated attacker can bypass access restrictions in the mail function, resulting in alteration of the order of mail folders. The root cause is an access restriction flaw in the mail handling logic. remediation per the documents is ...

tilestwra.com XSS vulnerability

Vulnerable URL: http://www.tilestwra.com/?s=%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2095 Google Pagerank| 0 VIP website...

Gentoo Security Advisory GLSA 201408-04

Gentoo Linux Local Security Checks GLSA 201408-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

SquirrelMail 1.4.5-RC1 - Arbitrary Variable Overwrite

SquirrelMail 1.4.5-RC1 - Arbitrary Variable Overwrite SquirrelMail Arbitrary Variable Overwrite Vendor: The SquirrelMail Project Team Product: SquirrelMail Version: = 1.4.5-RC1 Website: http://www.squirrelmail.org/ BID: 14254 CVE: CVE-2005-2095 SECUNIA: 16058 PACKETSTORM: 38709 Description:...

CVE-2015-2095

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments...

CVE-2015-2095

WebGate eDVR Manager's WESPPTZ.WESPPTZCtrl.1 ActiveX control is affected by a heap-based buffer overflow in SetConnectInfo. A remote attacker can run arbitrary code by supplying crafted arguments. Concrete details from multiple sources: Affected component: WESPPTZCtrl.1 ActiveX control in WebGate...

Joomla Component com_flippingBook SQL Injection (CVE-2008-2095)

An SQL injection vulnerability has been reported in Mambo Com FlippingbookMambo Com Flippingbook. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

GLSA-201408-04 : Catfish: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201408-04 Catfish: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Catfish. Please review the CVE identifiers referenced below for details. Impact : A local attacker could gain escalated privileges via a...

CVE-2012-2095

The CVE-2012-2095 issue affects WICD before 1.7.2, where the SetWiredProperty function in the D-Bus interface allows local users to write arbitrary configuration and gain privileges via a crafted property name in a dbus message. This is a local-privilege-escalation vulnerability with CVSS v2 base...

CVE-2014-2095

Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0, when a Fedora package such as 0.8.2-1 is not used, allows local users to gain privileges via a Trojan horse bin/catfish.pyc under the current working directory...

CVE-2014-2095

CVE-2014-2095 affects Catfish 0.6.0–1.0.0. The class of vulnerability is an untrusted search path that enables local privilege escalation when a Trojan horse bin/catfish.pyc in the current working directory is executed, if the Fedora package (e.g., 0.8.2-1) is not used. Multiple sources (NVD/NIDS...

Ubuntu: Security Advisory (USN-2095-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 3 / 4 : SquirrelMail (CESA-2005:595-02)

An updated squirrelmail package that fixes two security issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 04 Aug 2005 The previous SquirrelMail package released with this errata contained a bug which rendered the...