206 matches found
RedHat Update for libreswan RHSA-2016:2603-02
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...
CVE-2015-2604
Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...
CVE-2015-2603
Unspecified vulnerability in the Oracle Endeca Information Discovery Studio component in Oracle Fusion Middleware 2.2.2, 2.3, 2.4, 3.0, and 3.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Integrator, a different vulnerability than...
CVE-2015-2603
Technical details for CVE-2015-2603 are not publicly provided in the supplied documents. No concrete affected product/version, root cause, or remediation is available here. Monitor for official updates and advisories.
Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2603-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2603-1 advisory. Jesse Ruderman, Mats Palmgren, Byron Campen, and Steve Fink discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening...
CVE-2013-2603
The vulnerability concerns RealNetworks GameHouse RealArcade Installer 2.6.0.481, specifically the RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll. The issue stems from unexpected type conversions for invalid parameter types in this ActiveX control, which can be triggered by crafted ...
CVE-2014-2603
Unspecified vulnerability on HP 8/20q switches, SN6000 switches, and 8Gb Simple SAN Connection Kit with firmware before 8.0.14.08.00 allows remote authenticated users to obtain sensitive information via unknown vectors...
CVE-2014-2603
CVE-2014-2603 applies to HP H-series Fibre Channel Switches, HP 8/20q Fibre Channel Switches, HP SN6000 switches, and the HP 8Gb Simple SAN Connection Kit with firmware versions prior to 8.0.14.08.00. The HP security bulletin (HPSBST03038) describes a remote disclosure of information vulnerabilit...
Debian DSA-2603-1 : emacs23 - programming error
Paul Ling discovered that Emacs insufficiently restricted the evaluation of Lisp code if enable-local-variables is set to 'safe'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2603. The...
Debian Security Advisory DSA 2603-1 (emacs23 - programming error)
Paul Ling discovered that Emacs insufficiently restricted the evaluation of Lisp code if enable-local-variables is set to safe . OpenVAS Vulnerability Test $Id: deb2603.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2603-1 using nvtgen 1.0 Script version: 1.0 Author:...
CVE-2012-2603
CVE-2012-2603 affects CollabNet ScrumWorks Pro prior to 6.0. The vulnerability allows remote authenticated users to escalate privileges and access sensitive information by using a modified desktop client; exploitation relies on recompiling the client to bypass normal privilege checks. CollabNet s...
ScrumWorks Pro privilege escalation vulnerability
Overview ScrumWorks Pro versions prior to ScrumWorks Pro 6.0 contain a privilege escalation vulnerability. Description ScrumWorks Pro versions prior to ScrumWorks Pro 6.0 contain a privilege escalation vulnerability where a malicious user can escalate the privileges of their ScrumWorks Pro accoun...
CVE-2011-2603
The CVE-2011-2603 entry affects the NVIDIA 9400M driver (version 6.2.6) on Mac OS X 10.6.7. The vulnerability allows remote attackers to cause a denial of service (desktop hang) when a crafted WebGL page is loaded in Chrome or Firefox, demonstrated by lots-of-polys-example.html in the Khronos Web...
BlackBerry Desktop Software < 6.0.1 Database Backup File Password Brute Force Weakness
The version of BlackBerry Desktop Software installed on the remote host is older than version 6.0.1. Such versions use a weak password to encrypt backup files, which makes it possible for a local user to decrypt backup files via a brute-force attack. C Tenable Network Security, Inc...
CVE-2010-2603
The CVE-2010-2603 entry affects BlackBerry Desktop Software (Windows PC 4.7–6.0; Mac 1.0). The vulnerability arises from using a weak password to encrypt the database backup file, enabling local users to brute-force decrypt the backup. OpenVAS/Nessus records corroborate an information-disclosure/...
CVE-2009-2603
CVE-2009-2603 : The content shows concrete details: Escon SupportPortal Pro 3.0 contains multiple SQL injection flaws in index.php, exploitable via the (1) cat and (2) tid parameters. Remote attackers could execute arbitrary SQL commands. Impact is partial confidentiality, integrity, and availabi...
CVE-2009-2603
creationtimestamp| type| source ---|---|--- 2009-06-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8840...
Team SHATTER Security Advisory: Cross-site scripting in Oracle Enterprise Manager (REFRESHCHOICE Parameter)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Cross-site scripting in Oracle Enterprise Manager REFRESHCHOICE Parameter August 4, 2008 Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 10gR1, 10gR2 and 11g 11.1.0.6 Remote exploitable: Ye...
CVE-2008-2603
CVE-2008-2603 is an Oracle Enterprise Manager (Database Control) cross-site scripting vulnerability affecting 10gR1/10gR2/11.1.0.6 where the REFRESHCHOICE parameter can inject arbitrary script/HTML. The issue originates from the July 2008 CPU advisory; vendors released a patch as part of the CPU....