CVE-2012-2328

CVE-2012-2328 affects the Standards-Based Linux Instrumentation for Manageability (SBLIM) CIM Client (sblim-cim-client2) before 2.1.12. The flaw is in internal/cimxml/sax/NodeFactory.java, which computes hash values without restricting hash collisions, allowing a context-dependent attacker to cau...

HP Data Protector CRS Opcode 215 and 263 Stack Buffer Overflow (CVE-2013-2328)

Two stack buffer overflows have been discovered in HP Data Protector...

CVE-2013-2328

Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1636...

[security bulletin] HPSBMU02883 SSRT101227 rev.1 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03781657 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03781657 Version: 1 HPSBMU02883...

Scientific Linux Security Update : sblim-cim-client2 on SL6.x (20120620)

The SBLIM Standards-Based Linux Instrumentation for Manageability CIM Common Information Model Client is a class library for Java applications that provides access to CIM servers using the CIM Operations over HTTP protocol defined by the DMTF Distributed Management Task Force standards. It was...

CentOS Update for sblim-cim-client2 CESA-2012:0987 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 6 : sblim-cim-client2 (CESA-2012:0987)

Updated sblim-cim-client2 packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

RedHat Update for sblim-cim-client2 RHSA-2012:0987-04

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Low: Red Hat Security Advisory: sblim-cim-client2 security update

Updated sblim-cim-client2 packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

Debian Security Advisory DSA 2328-1 (freetype)

The remote host is missing an update to freetype announced via advisory DSA 2328-1. OpenVAS Vulnerability Test $Id: deb23281.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2328-1 freetype Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2328-1 : freetype - missing input sanitising

It was discovered that missing input sanitising in Freetype's glyph handling could lead to memory corruption, resulting in denial of service or the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

CVE-2011-2328

CVE-2011-2328 affects HP LoadRunner (Windows) where a buffer overflow can be triggered by a long .usr (Virtual User script) directive, potentially enabling remote arbitrary code execution or a DoS (daemon crash). The issue arises from handling oversized inputs in the script processing component. ...

IBM WebSphere应用服务器HTTP Channel远程拒绝服务漏洞

CVE ID: CVE-2010-2328 IBM Websphere应用服务器以Java和Servlet引擎为基础，支持多种HTTP服务，可帮助用户完成从开发、发布到维护交互式的动态网站的所有工作。 如果远程攻击者通过WebSphere应用服务器的HTTP Channel发送了大量使用gzip压缩的分块数据的话，就可以触发NullPointerException，导致拒绝服务的情况。 IBM Websphere Application Server 7.0.x 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2010-2328

CVE-2010-2328 affects IBM WebSphere Application Server (WAS) 7.0 prior to 7.0.0.11. The HTTP Channel can be triggered by a large amount of chunked data using gzip compression, causing a NullPointerException and a denial of service. The vulnerability is documented across multiple sources (NVD entr...

CVE-2009-2328

CVE-2009-2328 affects KerviNet Forum versions 1.1 and earlier. The issue is in admin/edit_user.php which does not require administrative authentication, enabling remote attackers to delete arbitrary user accounts and perform SQL injection via the del_user_id parameter. The available connected doc...

CVE-2009-2328

admin/edituser.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remote attackers to delete arbitrary accounts and conduct SQL injection attacks via the deluserid parameter...

CVE-2009-2328

creationtimestamp| type| source ---|---|--- 2009-07-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9068...

CVE-2002-2328

Technical details for CVE-2002-2328 are not publicly available in the provided documents. No affected products, versions, or remediation are specified here. Monitor for updates from Red Hat/NVD/CVE sources.

CVE-2006-2328

CVE-2006-2328 describes a SQL injection in AngelineCMS 0.6.5 and earlier. The issue is in the library file lib/adodb/server.php and allows an attacker to manipulate the query string to execute arbitrary SQL commands. Affected product/version explicitly stated as AngelineCMS 0.6.5 and earlier; roo...

CVE-2004-2328

The CVE concerns Clearswift MAILsweeper for SMTP prior to version 4.3_13. It is triggered by processing an e-mail with a crafted RAR archive attached, causing an infinite loop and resulting in a denial of service. The vulnerability affects the SMTP‑scanning path of MAILsweeper and is described in...