100 matches found
Oracle: Security Advisory (ELSA-2012-0683)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2134
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-2134
HP System Management Homepage (SMH) prior to version 7.5.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that allows an authenticated remote user to hijack another user’s session and perform actions on behalf of the victim. The HP Security Bulletin HPSBMU03409 (rev.1) lists CVE...
CVE-2015-2134
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
Fedora Update for librsvg2 FEDORA-2015-2134
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : flash-player (openSUSE-SU-2011:0897-1)
The update to Flash-Player 10.3.188.5 fixes various security issues : - CVE-2011-2130: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2134: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2135: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2136: CVSS v...
openSUSE Security Update : flash-player (openSUSE-SU-2011:0897-1)
The update to Flash-Player 10.3.188.5 fixes various security issues : - CVE-2011-2130: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2134: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2135: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2136: CVSS v...
CVE-2014-2134
CVE-2014-2134 affects Cisco WebEx Recording Format (WRF) Player. A heap-based buffer overflow in the WRF parser allows remote attackers to corrupt memory, potentially executing arbitrary code or causing an application crash via a crafted audio channel in a .wrf file. Impact noted as remote code e...
Ubuntu: Security Advisory (USN-2134-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-2134
CVE-2012-2134 affects bind-dyndb-ldap (LDAP back-end plug-in) in MiracleLinux 4 and similar builds. The vulnerability arises from improper handling of LDAP query errors in handle_connection_error, which can cause an infinite loop and hang of the named server when a non-alphabet character appears ...
Apache Struts Wildcard Matching OGNL Code Execution (CVE-2013-2134)
A code execution vulnerability exists in Apache Struts OGNL...
Security Advisory-Multiple Apache Struts2 Vulnerabilities in Huawei Products
Apache Struts2 is a second-generation and enterprise-ready Java web application framework based on the Model-View-Controller MVC architecture. This advisory describes four vulnerabilities of Apache Struts 2.0.0 - 2.3.15. Huawei products and applications using the above versions of Apache Struts a...
CVE-2013-2134
Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135...
CVE-2013-2134
CVE-2013-2134: Apache Struts 2 before 2.3.14.3 allows remote OGNL code execution through a crafted action name during wildcard matching. IBM and other bulletins link this family of Struts vulnerabilities to exposed management interfaces and unauthorized access risks, with remediation typically de...
Apache Struts 2 OGNL Expression Handling Double Evaluation Error Remote Command Execution
The remote web application appears to use Struts 2, a web framework that utilizes OGNL Object-Graph Navigation Language as an expression language. Due to a flaw in the evaluation of an OGNL expression, a remote, unauthenticated attacker can exploit this issue to execute arbitrary commands on the...
Apache Struts OGNL表达式注入漏洞(CVE-2013-2134)
BUGTRAQ ID: 60346 CVECAN ID: CVE-2013-2134 Struts2 是第二代基于Model-View-Controller MVC模型的java企业级web应用框架。它是WebWork和Struts社区合并后的产物。 Apache Struts 2.0.0-2.3.14.3存在远程OGNL表达式注入漏洞，远程攻击者可利用此漏洞操作服务器端对象并在受影响应用上下文中执行任意命令。此漏洞源于通配符匹配错误。 0 Apache Group Struts 2.x 厂商补丁： Apache Group ------------ Apache...
CVE-2013-2134
creationtimestamp| type| source ---|---|--- 2013-06-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38549 2025-10-14 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m36mtqkjmy2n...
Fedora Update for bind-dyndb-ldap FEDORA-2012-15981
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for bind-dyndb-ldap FEDORA-2012-15981
Check for the Version of bind-dyndb-ldap OpenVAS Vulnerability Test Fedora Update for bind-dyndb-ldap FEDORA-2012-15981 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...
Fedora Update for bind-dyndb-ldap FEDORA-2012-11470
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...