CVE-2015-7374

The Remote Agent component in Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-2649...

CVE-2015-2649

Oracle Siebel CRM is affected by CVE-2015-2649 in the Siebel UI Framework (subcomponent UIF Open UI). Affected versions are 8.1.1, 8.2.2, and 15.0. The vulnerability allows remote authenticated users to access a subset of Siebel UI data, impacting confidentiality via HTTPS. Attack characteristics...

Ubuntu 14.04 LTS : devscripts vulnerability (USN-2649-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2649-1 advisory. It was discovered that the uupdate tool incorrectly handled symlinks. If a user or automated system were tricked into processing specially crafted files, a remote...

Ubuntu: Security Advisory (USN-2649-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP Operations Manager 9.10 / 9.11 / 9.20 Multiple RCE

The version of HP Operations Manager for Unix installed on the remote host is 9.10, 9.11, or 9.20 without the vendor-supplied patches. It is, therefore, affected by multiple unspecified flaws that allow an unauthenticated, remote attacker to execute arbitrary code. C Tenable Network Security, Inc...

[security bulletin] HPSBMU03127 rev.1 - HP Operations Manager for UNIX, Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04472866 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04472866 Version: 1 HPSBMU03127 rev....

CVE-2014-2649

Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2012-2649

CVE-2012-2649 affects Sleipnir Mobile for Android (2.2.0 and earlier) and Sleipnir Mobile Black Edition for Android (2.2.0 and earlier). The vulnerability allows remote attackers to execute arbitrary Java methods via a specially crafted website, potentially exposing data stored on the Android dev...

CVE-2012-2649

The Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allow remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site...

CVE-2011-2649

Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call...

CVE-2011-2649

Kiwi before 3.74.2 (as used in SUSE Studio 1.1 before 1.1.4) is vulnerable to command execution via shell metacharacters in an unspecified FileUtils function. The root cause is not fully detailed in the provided documents, but the vulnerability allows an attacker to execute arbitrary commands. Th...

Google Chrome multiple vulnerabilities - July 10

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnjul10.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - July 10 Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...

CVE-2010-2649

Google Chrome 5.0.375.99 and prior versions are affected by multiple vulnerabilities including invalid image handling that can crash the browser or potentially allow memory corruption. Public sources (OpenVAS entries and Seebug summary) describe a set of issues in July 2010 across WebGL bounds ch...

CVE-2010-2649

Removed by vendor...

CVE-2009-2649

The IATA ata driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service kernel panic via a certain IOCTL request with a large count, which triggers a malloc call with a large value...

CVE-2009-2649

CVE-2009-2649 affects the FreeBSD IATA (ATA) driver on FreeBSD 6.0 and 8.0. If an attacker has read access to /dev, a crafted IOCTL request with a large count can trigger a malloc call with a large value, causing a local denial-of-service (kernel panic). The exploit requires local access and is d...

CVE-2008-2649

CVE-2008-2649 affects DesktopOnNet 3 Beta, where two PHP scripts (don3_requiem.php and frontpage.php) are vulnerable to remote file inclusion via the app_path URL parameter, allowing an attacker to execute arbitrary PHP code on the server. The vulnerability is triggered by supplying a crafted URL...

CVE-2008-2649

creationtimestamp| type| source ---|---|--- 2008-06-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5715...

CVE-2007-2649

The CVE-2007-2649 entry concerns Deutsche Telekom Speedport W 700v. The device uses JavaScript delays to throttle invalid authentication attempts against a CGI script, but remote attackers can bypass these delays by issuing direct calls to the authentication CGI script, enabling brute-force attem...

CVE-2006-2649

In CosmicShoppingCart, the CosmicShop directory contains multiple XSS vulnerabilities in search.php, search_cat.php, search_price.php, and product_details.php. The flaws allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, demonstrated by the (1) query paramet...