68 matches found
gapa-mb.czech-trade.fr Cross Site Scripting vulnerability
Security Researcher Hchabik Helped patch 2351 vulnerabilities Received 5 Coordinated Disclosure badges Received 2 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting gapa-mb.czech-trade.fr website and its users. Following...
CVE-2018-2351
CVE-2018-2351 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-2351
CVE-2017-2351 affects iOS prior to 10.2.1 in the Wi‑Fi component. A physically proximate attacker could bypass activation lock and briefly view the home screen due to improper handling of input; update to iOS 10.2.1 (per Apple advisory HT207482) to remediate.
CVE-2016-2351
CVE-2016-2351 affects the Accellion File Transfer Appliance (FTA) prior to FTA_9_12_40. The vulnerability is an SQL injection in the file path home/seos/courier/security_key2.api that allows a remote attacker to execute arbitrary SQL commands via the client_id parameter, as documented by NVD and ...
Accellion File Transfer Appliance (FTA) contains multiple vulnerabilities
Overview The Accellion File Transfer Appliance FTA contains multiple vulnerabilites that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Accellion File Transfer appliance contains multiple vulnerabilities in versions below...
CVE-2015-2351
CVE-2015-2351 describes multiple XSS flaws in Alkacon OpenCms 9.5.1 and earlier caused by insufficient input filtering. Attackers can inject arbitrary script/HTML via five vectors: homelink in system/modules/org.opencms.workplace.help/jsptemplates/help_head.jsp; workplaceresource in system/workpl...
Ubuntu: Security Advisory (USN-2351-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-2351
CSWorks software framework vulnerability (CVE-2014-2351) affects the CSWorks LiveData service before version 2.5.5233.0. The flaw arises from improper handling of data used to construct read/write paths in web API requests, enabling SQL injection. References indicate that remote attackers could p...
[security bulletin] HPSBMU02870 SSRT101012 rev.2 - HP Network Node Manager I (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03747342 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03747342 Version: 2 HPSBMU02870...
CVE-2013-2351
HP NNMi (HP Network Node Manager i) versions 9.00, 9.1X, and 9.2X are affected by CVE-2013-2351. The ZDI advisory describes a flaw in pmd.exe that listens on TCP port 162; a specially crafted packet can cause a heap corruption and remote code execution without authentication. HP/SSRT bulletin SSR...
CVE-2012-2351
The vulnerability CVE-2012-2351 affects Mahara’s auth/saml plugin. In Mahara versions older than 1.4.2, the default setting for “Match username attribute to Remote username” is false, enabling a remote SAML IdP to spoof users on other IdPs by reusing the same internal username. This is a configur...
Debian Security Advisory DSA 2351-1 (wireshark)
The remote host is missing an update to wireshark announced via advisory DSA 2351-1. OpenVAS Vulnerability Test $Id: deb23511.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2351-1 wireshark Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Gentoo Security Advisory GLSA 201111-01 (chromium v8)
The remote host is missing updates announced in advisory GLSA 201111-01. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
Debian DSA-2351-1 : wireshark - buffer overflow
Huzaifa Sidhpurwala discovered a buffer overflow in Wireshark's ERF dissector, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2351. Th...
APPLE-SA-2011-10-12-4 Safari 5.1.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-4 Safari 5.1.1 Safari 5.1.1 is now available and addresses the following: Safari Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7.2, OS X Lion Server v10.7.2, Windows 7, Vista, XP SP2 or later Impact:...
CVE-2011-2351
Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements...
CVE-2011-2351
Technical details for CVE-2011-2351 are not publicly provided in the supplied documents. Monitor for updates.
Google Fixes Six High-Risk Bugs in Chrome, Pays Out $6k in Bounties
Google has fixed seven security vulnerabilities in its Chrome browser, including six high-priority flaws. The new release of Chrome is version 12.0.742.112 and also includes an updated version of Flash. The latest version of Chrome is the third major update from the company since just the end of...
CVE-2010-2351
CVE-2010-2351 is a stack-based buffer overflow in the CIFS.NLM driver of Netware SMB 1.0 (Novell Netware 6.5 SP8 and earlier). The vulnerability allows remote attackers to execute arbitrary code via a Sessions Setup AndX packet with a long AccountName. Public references confirm the affected compo...
