Ubuntu: Security Advisory (USN-2584-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 / 6 : Unbreakable Enterprise Kernel (ELSA-2013-2584)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2584 advisory. - fs/compatioctl.c: VIDEOSETSPUPALETTE missing error check Kees Cook Orabug: 17842208 CVE-2013-1928 - Bluetooth: RFCOMM - Fix info leak via...

Debian: Security Advisory (DSA-2584-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2584-1 : iceape - several vulnerabilities

Multiple vulnerabilities have been found in Iceape, the Debian Internet suite based on Mozilla SeaMonkey : - CVE-2012-5829 Heap-based buffer overflow in the nsWindow::OnExposeEvent function could allow remote attackers to execute arbitrary code. - CVE-2012-5842 Multiple unspecified vulnerabilitie...

MDaemon WorldClient < 12.5.7 Multiple XSS Vulnerabilities

According to its banner, the version of MDaemon's WorldClient is earlier than 12.5.7 and is, therefore, affected by the following cross-site scripting vulnerabilities : - Input supplied in body of an email is not properly sanitized before being presented to the user. Specially crafted email...

CVE-2012-2584

CVE-2012-2584 affects Alt-N MDaemon Free 12.5.4 with multiple XSS in email bodies: CSS expression usage (within STYLE on IMG or other elements) and innerHTML attributes in XML. Root cause is improper sanitization enabling script/HTML injection, leading to potential remote code execution-like impa...

CVE-2012-2584

creationtimestamp| type| source ---|---|--- 2012-08-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20357...

CVE-2011-2584

Cisco Show and Share versions 5.2(1) and 5.2(2) prior to 5.2(2.1) are affected by CVE-2011-2584, which allows anonymous users to access several administrative pages (Encoders/Pull Configs, Push Configs, Video Encoding Formats, Transcoding) and potentially cause a live-event DoS or disclosure of i...

RealPage Module Upload ActiveX Control Multiple Vulnerabilities

The RealPage Module Upload ActiveX control, used with RealPage's OneSite Property Management Systems software and installed on the remote Windows host, reportedly is affected by several vulnerabilities : - The 'Upload' method in combination with the 'SourceFile' and 'DestURL' properties can be...

CVE-2010-2584

The CVE-2010-2584 entry concerns the RealPage Module Upload ActiveX Control (Realpage.dll 1.0.0.9) within RealPage Module ActiveX Controls. The Upload method does not properly constrain certain property values, enabling a remote attacker to read arbitrary files by supplying a filename in the Sour...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : linux, linux-source-2.6.15 vulnerabilities (USN-852-1)

Solar Designer discovered that the z90crypt driver did not correctly check capabilities. A local attacker could exploit this to shut down the device, leading to a denial of service. Only affected Ubuntu 6.06. CVE-2009-1883 Michael Buesch discovered that the SGI GRU driver did not correctly check...

CVE-2009-2584

Off-by-one error in the optionswrite function in drivers/misc/sgi-gru/gruprocfs.c in the SGI GRU driver in the Linux kernel 2.6.30.2 and earlier on ia64 and x86 platforms might allow local users to overwrite arbitrary memory locations and gain privileges via a crafted count argument, which trigge...

CVE-2007-2584

CVE-2007-2584 describes a buffer overflow in the IsOldAppInstalled function of McSubMgr.McSubMgr (MCSUBMGR.DLL) used by McAfee SecurityCenter. Vulnerable are SecurityCenter versions before 6.0.25 and 7.x before 7.2.147. A crafted argument can allow remote code execution with full impact on confid...

CVE-2006-2596

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-2584. Reason: This candidate is a duplicate of CVE-2006-2584. Notes: All CVE users should reference CVE-2006-2584 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2006-2584

CVE-2006-2584 documents multiple cross-site scripting (XSS) vulnerabilities in post.php of SkyeBox 1.2.0. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) name or (2) message parameters. The description notes that provenance is from third-party information and ...

CVE-2005-2584

Affected product: Mentor ADSL-FR4II router (firmware 2.00.0111). Vulnerability: The web administration interface does not set a default password, allowing local users to gain access. Impact: local access with likely full control over the device. Root cause (as stated): lack of a default password ...