CVE-2012-2393

creationtimestamp| type| source ---|---|--- 2012-05-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18918...

CVE-2011-2393

The CVE-2011-2393 entry concerns the IPv6 Neighbor Discovery implementation in BSD-derived stacks (FreeBSD, NetBSD, and possibly others) where processing of Router Advertisement messages from multiple source addresses can exhaust CPU and cause device hang, constituting a remote denial of service ...

Debian DSA-2393-1 : bip - buffer overflow

Julien Tinnes reported a buffer overflow in the Bip multiuser IRC proxy which may allow arbitrary code execution by remote users. The oldstable distribution lenny is not affected by this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2009-2393

The CVE-2009-2393 entry concerns Virtuenetz Virtue Online Test Generator: admin/index.php does not require administrative privileges, allowing remote authenticated users to have an unknown impact via unspecified vectors. Documented CVSS v2 base score is 6.5 (MEDIUM) with network attack vector, lo...

CVE-2008-2393

Summary of CVE-2008-2393 (EntertainmentScript) : A SQL injection vulnerability exists in the script’s file play.php in EntertainmentScript 1.4.0. The vulnerability allows remote attackers to inject arbitrary SQL through the id parameter, potentially altering or accessing the database. Affected co...

CVE-2008-2393

creationtimestamp| type| source ---|---|--- 2008-05-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5654...

CVE-2002-2393

The CVE-2002-2393 entry affects Serv-U FTP server versions 3.0, 3.1, and 4.0.0.4. The issue causes denial of service by preventing new connections while validating user folder access rights, triggered by a series of MKD commands. No exploitation details are provided in the connected documents. No...

CVE-2007-2393

CVE-2007-2393 affects Apple QuickTime, specifically the QuickTime for Java component, prior to version 7.2. The vulnerability arises from a design flaw in the Java handling that allows remote attackers to bypass security controls and write to process memory via Java applets, potentially enabling ...

CVE-2006-2393

The CVE-2006-2393 entry documents a vulnerability in Empire (server) prior to and including version 4.3.2, where the client_cmd function can be triggered remotely. The underlying issue is that excessively long text strings appended to the player->client buffer lead to an invalid memory access,...

CVE-2004-2393

Affected software : Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2. Issue : JSSE does not properly validate the certificate chain of a client or server, enabling remote attackers to falsely authenticate peers for SSL/TLS. Root cause : insufficient certificate-chain validation. Impact :...

CVE-2005-2393

CVE-2005-2393 affects CuteNews 1.3.6. The vulnerability is a cross-site scripting (XSS) flaw exploitable via two user-supplied parameters: (1) lastusername in index.php and (2) selected_search_arch in search.php. The underlying issue is insufficient input sanitization/escaping, allowing a remote ...

CVE-2004-2393

Java Secure Socket Extension JSSE 1.0.3 through 1.0.32 does not properly validate the certificate chain of a client or server, which allows remote attackers to falsely authenticate peers for SSL/TLS...

CVE-2002-2393

Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attackers to cause a denial of service no new connections via a series of MKD commands...