88 matches found
CVE-2016-2560
The CVE-2016-2560 issue affects phpMyAdmin series: 4.0.x before 4.0.10.15, 4.4.x before 4.4.15.5, and 4.5.x before 4.5.5.1. The vulnerability consists of multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML through several vectors (crafted H...
Manage Engine Desktop Central 9 - CVE-2015-2560 - Unauthorised administrative password reset
A vulnerability exists in the Manage Engine Desktop Central 9 application that affects version build 90130. This may affect earlier releases as well. The vulnerability allows a remote unauthenticated user to change the password of any Manage Engine Desktop Central user with the ‘Administrator’ ro...
Ubuntu: Security Advisory (USN-2560-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom...
PhonerLite 2.14 SIP Soft Phone - SIP Digest Leak Information Disclosure (CVE-2014-2560)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom Severity: Medium II. Vulnerability...
PhonerLite 2.14 SIP Soft Phone - SIP Digest Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom Severity: Medium II. Vulnerability...
PhonerLite 2.14 Digest Information Leak
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I. Advisory Summary Title: SIP Digest Leak Information Disclosure in PhonerLite 2.14 SIP Soft Phone Date Published: March 30, 2014 Vendors contacted: Heiko Sommerfeldt, PhonerLite author Discovered by: Jason Ostrom Severity: Medium II. Vulnerability...
CVE-2013-2560
Directory traversal vulnerability in the web interface on Foscam devices with firmware before 11.37.2.49 allows remote attackers to read arbitrary files via a .. dot dot in the URI, as demonstrated by discovering 1 web credentials or 2 Wi-Fi credentials...
CVE-2013-2560
CVE-2013-2560 affects Foscam IP camera firmware before 11.37.2.49. The issue is a directory traversal in the web interface that allows remote attackers to read arbitrary files by using a .. in the URI, potentially exposing web and Wi‑Fi credentials (and possibly the full filesystem). Exploitation...
CVE-2013-2560
creationtimestamp| type| source ---|---|--- 2013-03-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38356...
Debian Security Advisory DSA 2560-1 (bind9)
The remote host is missing an update to bind9 announced via advisory DSA 2560-1. OpenVAS Vulnerability Test $Id: deb25601.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2560-1 bind9 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Debian: Security Advisory (DSA-2560-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-2560-1 : bind9 - denial of service
It was discovered that BIND, a DNS server, hangs while constructing the additional section of a DNS reply, when certain combinations of resource records are present. This vulnerability affects both recursive and authoritative servers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Scientific Linux Security Update : wireshark on SL3.x, SL4.x, SL5.x i386/x86_64
An invalid pointer dereference flaw was found in the Wireshark SMB and SMB2 dissectors. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark. CVE-2009-4377 Several buffer overflow flaw...
CVE-2012-2560
CVE-2012-2560 affects WellinTech KingView 6.53. A directory traversal vulnerability allows remote attackers to read arbitrary files by sending a crafted HTTP request to port 8001. The issue originates from a path traversal weakness in KingView, with the potential for file disclosure. Red Hat/NVD ...
WellinTech KingView 6.53 < 2012-03-22 Multiple Vulnerabilities
Binary data scadakingview6532012-03-22.nbin...
CVE-2011-2560
The CVE-2011-2560 issue affects Cisco Unified Communications Manager (CUCM) 4.x, specifically the Packet Capture Service. The root cause is improper handling of idle TCP connections, allowing a remote attacker to exhaust memory and trigger a denial-of-service resulting in a restart by establishin...
CentOS Update for wireshark CESA-2010:0360 centos5 i386
Check for the Version of wireshark OpenVAS Vulnerability Test CentOS Update for wireshark CESA-2010:0360 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
SuSE 11 / 11.1 Security Update : w3m (SAT Patch Numbers 2560 / 2563)
w3m does not handle embedded NUL characters in the common name and in subject alternative names of X.509 certificates CVE-2010-2074. This update fixes the issue and also turns on verification of x509 certificates by default which was not the case before. %NASLMINLEVEL 70300 C Tenable Network...
SuSE 10 Security Update : ethereal (ZYPP Patch Number 6628)
Update of wireshark to fix multiple vulnerabilities : - The Paltalk dissector could crash on alignment-sensitive processors. CVE-2009-3549: CVSS v2 Base Score: 5.0 MEDIUM - The DCERPC/NT dissector could crash. CVE-2009-3550: CVSS v2 Base Score: 4.3 MEDIUM - The SMB dissector could crash...