CVE-2011-2309

Technical details for CVE-2011-2309 are not publicly available in the provided connected documents; the description remains high level (Health Sciences RDC in Oracle Industry Applications 4.6/4.6.2). Monitor for updates.

[SECURITY] [DSA 2309-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2309-1 [email protected] http://www.debian.org/security/ Raphael Geissert September 13, 2011 http://www.debian.org/security/faq -...

UFO: Alien Invasion IRC Client (OSX) - Remote Buffer Overflow (Metasploit)

$Id: ufoai.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ requir...

UFO: Alien Invasion IRC Client Buffer Overflow Exploit

$Id: ufoai.rb 9659 2010-07-02 00:10:51Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Immunity Canvas: EVOCAM

Name| evocam ---|--- CVE| CVE-2010-2309 Exploit Pack| CANVAS Description| EVOCAM Notes| CVSS: 7.5 Repeatability: One shot VENDOR: Evologic CVE Url: https://vulners.com/cve/CVE-2010-2309 CVE Name: CVE-2010-2309...

CVE-2010-2309

The CVE-2010-2309 entry describes a stack/buffer overflow in the EvoLogical EvoCam 3.6.6–3.6.7 Web Server that permits remote code execution via an excessively long GET request. Public references (Exploits/Metasploit and Nessus advisory) confirm the affected software and the vulnerability class, ...

CVE-2010-2309

creationtimestamp| type| source ---|---|--- 2010-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13735 2010-07-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14254 2010-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16864 2010-10-09...

MacOS X EvoCam HTTP GET Buffer Overflow

This module exploits a stack buffer overflow in the web server provided with the EvoCam program for Mac OS X. We use Dino Dai Zovi's exec-from-heap technique to copy the payload from the non-executable stack segment to heap memory. Vulnerable versions include 3.6.6, 3.6.7, and possibly earlier...

Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004

The remote host is missing Mac OS X 10.5.4 Update / Mac OS X Security Update 2008-004. One or more of the following components are affected: Alias Manager CoreTypes c++filt Dock Launch Services Net-SNMP Ruby SMB File Server System Configuration Tomcat VPN WebKit OpenVAS Vulnerability Test Mac OS ...

CVE-2009-2309

CVE-2009-2309 describes a SQL injection vulnerability in Codice CMS 2, exploitable via the tag parameter in index.php. The underlying issue is an input handling flaw that allows remote attackers to execute arbitrary SQL commands. The vulnerability is documented across multiple sources (NVD and CV...

CVE-2009-2309

creationtimestamp| type| source ---|---|--- 2009-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8272...

CVE-2008-2309

The CVE-2008-2309 entry concerns Apple Mac OS X before 10.5.4, with an Incomplete blacklist vulnerability in CoreTypes. A user-assisted remote attacker could run arbitrary code by providing a .xht or .xhtm file, which would not trigger potential‑unsafe warnings in Mac OS X components: Download Va...

Apple Mac OS X 2008-004更新修复多个安全漏洞

BUGTRAQ ID: 30018 CVECAN ID: CVE-2008-2308,CVE-2008-2309,CVE-2008-2310,CVE-2008-2314,CVE-2008-2311,CVE-2008-2313 Mac OS X是苹果家族机器所使用的操作系统。 Apple 2008-004安全更新修复了Mac OS X中的多个安全漏洞，本地或远程攻击者可能利用这些漏洞造成多种威胁。 CVE-2008-2308 在处理别名数据结构的AFP卷标加载信息时存在内存破坏漏洞，解析了包含有恶意卷标加载信息的别名会导致应用程序意外终止或执行任意指令。 CVE-2008-2309...

Mac OS X 10.5.x < 10.5.4 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.4. Mac OS X 10.5.4 contains security fixes for multiple components. C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; if NASLLEVEL 3004 exit0; include"compat.inc"; if description scriptid33281;...

CVE-2002-2309

php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to cause a denial of service via a direct request without arguments...

CVE-2002-2309

Summary: CVE-2002-2309 affects PHP 3.0–4.2.2 when running on Apache, where php.exe does not terminate properly, enabling a remote attacker to cause a denial of service via a direct request without arguments. The linked Red Hat and CVE records corroborate the vulnerability description across multi...

CVE-2007-2309

Cross-site scripting XSS vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the den parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2309

CVE-2007-2309 affects FloweRS 2.0, with a cross-site scripting vulnerability in cas.php exploitable via the den parameter. Remote attackers can inject arbitrary script/HTML. Connected sources confirm the component and parameter but do not provide concrete exploit details, impact beyond XSS, or re...

CVE-2007-2309

Cross-site scripting XSS vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web script or HTML via the den parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2004-2309

CVE-2004-2309 affects Crob FTP Server 3.5.1. A directory traversal vulnerability allows local users to browse outside the FTP root via multiple ../ in the DIR command. According to NVD, the impact is partial confidentiality with local access and no authentication barriers; no exploitation details...