178 matches found
RHEL 5 / 6 : flash-plugin (RHSA-2015:2593)
An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...
CVE-2015-2593
CVE-2015-2593 affects Oracle Fusion Middleware 11.1.2.2 specifically the Oracle Access Manager component, with the Configuration Service as the vulnerable subcomponent. The vulnerability allows remote authenticated users to impact confidentiality and integrity via unspecified vectors. The availab...
Ubuntu 14.04 LTS : Dnsmasq vulnerability (USN-2593-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2593-1 advisory. Nick Sampanis discovered that Dnsmasq incorrectly handled certain malformed DNS requests. A remote attacker could use this issue to cause Dnsmasq to crash,...
CVE-2014-2593
The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the 1 system status-rasession and 2 network ping commands...
CVE-2014-2593
Aruba Networks ClearPass Policy Manager 6.3.0.60730 contains a command injection flaw in its management console, where local users can execute arbitrary shell commands via metacharacters in arguments of valid commands (notably system status-rasession and network ping). This CVE (CVE-2014-2593) is...
CVE-2011-2593
CVE-2011-2593 affects the Citrix Access Gateway Plug-in for Windows (nsepacom ActiveX control, nsepa.exe) StartEpa method. An integer overflow can be triggered by a crafted Content-Length HTTP header, leading to a heap-based buffer overflow and remote code execution. Affected versions are Citrix ...
Debian DSA-2593-1 : moin - several vulnerabilities
It was discovered that missing input validation in the twikidraw and anywikidraw actions can result in the execution of arbitrary code. This security issue is being actively exploited. This update also addresses path traversal in AttachFile. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...
Secunia Research: Citrix Access Gateway Plug-in for Windows nsepacom ActiveX Control Integer Overflow
====================================================================== Secunia Research 01/08/2012 - Citrix Access Gateway Plug-in for Windows - - "nsepacom" ActiveX Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...
CVE-2012-2593
creationtimestamp| type| source ---|---|--- 2012-07-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20009 2020-02-06 16:35:12+00:00| seen| https://t.me/cibsecurity/9657...
CVE-2009-2593
CVE-2009-2593 is a SQL injection in censura.php (Censura 1.16.04) allowing remote attackers to execute arbitrary SQL via the itemid parameter in the details action. The NVD entry notes an overall CVSSv2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, and no authenticat...
CVE-2009-2593
creationtimestamp| type| source ---|---|--- 2009-07-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9129...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 has unknown impact and remote attack vectors, a different vulnerability than CVE-2008-2593...
CVE-2008-2593
CVE-2008-2593 and CVE-2008-2594 refer to distinct vulnerabilities in the Oracle Portal component of Oracle Application Server 10g (versions 10.1.2.3 and 10.1.4.2). The Initial description indicates these are unspecified vulnerabilities with unknown impact and remote vectors. Connected documentati...
CVE-2007-2593
Technical details for CVE-2007-2593 are not publicly provided in the supplied documents; monitor for updates.
CVE-2004-2593
CVE-2004-2593 concerns the Quake II server (before R1Q2) with a buffer overflow in command-packet processing triggered by a long cmd_args buffer. The flaw allows remote attackers to crash the server and, potentially, execute arbitrary code over the network. The published CVSS vector is AV:N/AC:L/...
CVE-2005-2593
Parlano MindAlign 5.0 and later versions are described as using weak encryption, with unknown impact and attack vectors. The CVSS v2.0 data from NVD lists a base score of 10.0, attack vector Network, complexity Low, authentication None, and Confidentiality/Integrity/Availability Impact as Complet...
CVE-2004-2593
Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a packet with a long cmdargs buffer...