Lucene search
+L

151 matches found

Tenable Nessus
Tenable Nessus
added 2015/05/07 12:00 a.m.35 views

HP Operations Orchestration 10.x Authentication Bypass

The remote host has a version of HP Operations Orchestration installed that is 10.x prior to 10.21. It is, therefore, affected by an authentication bypass vulnerability due to an unspecified flaw. A remote attacker can exploit this flaw to bypass authentication credentials to obtain sensitive...

7.5CVSS5.6AI score0.04082EPSS
SaveExploits0References2
CVE
CVE
added 2015/03/31 10:00 a.m.66 views

CVE-2015-2109

CVE-2015-2109 affects HP Operations Orchestration 10.x where an authentication bypass vulnerability exists due to an unspecified flaw. Public documents show affected versions are HP O.O. 10.x prior to 10.21 (per Tenable NASL reference) and HP security bulletin HPSBMU03292 rev.1 (SSRT101981) confi...

7.5CVSS6.4AI score0.04082EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/12/22 12:00 a.m.46 views

Adobe Shockwave Player <= 11.5.9.620 (APSB11-17) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.5.9.620 or earlier. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption vulnerabilities affect the 'Dirapi.dll' component that can result in arbitrary code execution. CVE-2011-0317,...

9.3CVSS6.8AI score0.08464EPSS
SaveExploits0References44
seebug.org
seebug.org
added 2014/03/28 12:00 a.m.25 views

Cisco IOS Software TCP输入漏洞

CVECAN ID: CVE-2014-2109 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS 15.1-15.4版本内的TCP输入模块存在安全漏洞,未经身份验证的远程攻击者利用此漏洞可造成受影响设备重载,导致拒绝服务(内存耗尽)。 0 Cisco IOS 15.1-15.4 Cisco已经为此发布了一个安全公告(cisco-sa-20140326-nat)以及相应补丁:...

7.8CVSS9AI score0.02237EPSS
SaveExploits1
CVE
CVE
added 2014/03/27 9:00 p.m.93 views

CVE-2014-2109

CVE-2014-2109 affects Cisco IOS NAT handling in the TCP Input module. The vulnerability, triggered by crafted TCP packets (when NAT is used), could cause memory exhaustion or device reload, resulting in DoS on affected Cisco IOS 12.2–12.4 and 15.0–15.4 releases. The issue is tied to the NAT proce...

7.8CVSS6.6AI score0.02237EPSS
SaveExploits1References2Affected Software1
OpenVAS
OpenVAS
added 2014/02/20 12:00 a.m.50 views

Ubuntu: Security Advisory (USN-2109-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS7.3AI score0.09408EPSS
SaveExploits5References2
OpenVAS
OpenVAS
added 2014/02/20 12:00 a.m.42 views

Ubuntu Update for linux USN-2109-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN21091.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for linux USN-2109-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

7.2CVSS0.03209EPSS
SaveExploits4References2
NVD
NVD
added 2012/09/04 8:55 p.m.26 views

CVE-2012-2109

SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an activitywidgetfilter action...

7.5CVSS8.4AI score0.03365EPSS
SaveExploits2References6
CVE
CVE
added 2012/09/04 8:00 p.m.58 views

CVE-2012-2109

The CVE-2012-2109 entry relates to a SQL injection in the BuddyPress WordPress plugin (1.5.x before 1.5.5) triggered via the page parameter in an activity_widget_filter action. Affected component is BuddyPress plugin for WordPress; root cause is unsafely constructed SQL from user-controllable inp...

7.5CVSS8.7AI score0.03365EPSS
SaveExploits2References6Affected Software1
Circl
Circl
added 2012/03/31 12:00 a.m.11 views

CVE-2012-2109

creationtimestamp| type| source ---|---|--- 2012-03-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18690...

7.5CVSS5.8AI score0.03365EPSS
SaveExploits2References1
securityvulns
securityvulns
added 2011/06/17 12:00 a.m.63 views

ZDI-11-217: Adobe Shockwave Font Structure Parsing Remote Code Execution Vulnerability

ZDI-11-217: Adobe Shockwave Font Structure Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-217 June 14, 2011 -- CVE ID: CVE-2011-2109 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Adobe -- Affected Products: Adobe Shockwave Player --...

9.3CVSS0.5AI score0.08464EPSS
SaveExploits0
CVE
CVE
added 2011/06/16 11:00 p.m.65 views

CVE-2011-2109

Adobe Shockwave Player contains multiple memory corruption and integer overflow vulnerabilities in Dirapi.dll that can lead to arbitrary code execution. CVE-2011-2109 is tied to multiple integer overflows in Dirapi.dll, with root cause in size/length handling during parsing (rcsL/Director file fo...

9.3CVSS7.5AI score0.08464EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2011/06/16 11:00 p.m.33 views

CVE-2011-2109

Multiple integer overflows in Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allow attackers to execute arbitrary code via unspecified vectors...

7.4AI score0.08464EPSS
SaveExploits0References3
CVE
CVE
added 2010/05/28 6:00 p.m.60 views

CVE-2010-2109

CVE-2010-2109 refers to an unspecified vulnerability in Google Chrome before 5.0.375.55 that allows user-assisted remote attackers to cause a denial of service (memory error) or possibly other impact via vectors related to the drag + drop functionality. Affected software is Google Chrome pre-5.0....

7.5CVSS7.2AI score0.01164EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2009/06/18 9:00 p.m.63 views

CVE-2009-2109

CVE-2009-2109 affects FretsWeb 1.2. Multiple directory traversal vulnerabilities allow remote attackers to read arbitrary files via the language parameter to charts.php and the fretsweb_language cookie parameter to unspecified vectors, possibly related to admin/common.php. Root cause: improper ha...

5CVSS7.2AI score0.09484EPSS
SaveExploits1References4Affected Software1
Circl
Circl
added 2009/06/17 12:00 a.m.11 views

CVE-2009-2109

creationtimestamp| type| source ---|---|--- 2009-06-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8979...

5CVSS5.8AI score0.09484EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2009/02/17 12:00 a.m.13 views

Fedora Update for libid3tag FEDORA-2008-3976

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS7.6AI score0.07267EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2009/02/17 12:00 a.m.12 views

Fedora Update for libid3tag FEDORA-2008-3757

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS7.6AI score0.07267EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2009/02/17 12:00 a.m.10 views

Fedora Update for libid3tag FEDORA-2008-3874

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS7.6AI score0.07267EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2008/09/04 12:00 a.m.30 views

FreeBSD Ports: wordpress

The remote host is missing an update to the system as announced in the referenced advisory. VID dca0a345-ed81-11d9-8310-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

7.5CVSS0.0932EPSS
SaveExploits3
Rows per page
Query Builder