72 matches found
CVE-2018-2651
CVE-2018-2651 affects Oracle PeopleSoft Enterprise PeopleTools (XML Publisher). Vulnerable on PeopleSoft Products versions 8.54–8.56; requires no authentication and can be exploited over HTTP to access data via PeopleTools. Root cause relates to the XML Publisher component; details consistently d...
CVE-2018-2651
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: XML Publisher. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2016-2651
CVE-2016-2651 is rejected/not used per the Initial Description.
CVE-2017-2651
jenkins-mailer-plugin before version 1.20 is vulnerable to an information disclosure while using the feature to send emails to a dynamically created list of users based on the changelogs. This could in some cases result in emails being sent to people who have no user account in Jenkins, and in ra...
CVE-2015-2651
CVE-2015-2651 affects Oracle Solaris 11.2 kernel zones’ virtualized NIC driver. Local attackers can cause a denial of service by exploiting a vulnerability in the NIC driver component. No explicit exploit details are given in the provided sources. The vulnerability is discussed across multiple re...
Oracle Solaris Critical Patch Update : jul2015_SRU11_2_11_5_0
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: S10 Branded Zone. Supported versions that are affected are 10 and 11.2. Easily exploitable vulnerability requiring...
Ubuntu 14.04 LTS : GNU patch vulnerabilities (USN-2651-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2651-1 advisory. Jakub Wilk discovered that GNU patch did not correctly handle file paths in patch files. An attacker could specially craft a patch file that could...
Family Connections CMS 2.5.0 & 2.7.1 - (less.php) Remote Command Execution
No description provided by source. ?php / Family connections CMS v2.5.0-v2.7.1 remote command execution exploit vendor: https://www.familycms.com/ software link: https://www.familycms.com/download.php author: mrme::rwx kru email: steventhomasseeley!gmail!com ----------------------------------...
CVE-2013-2651
BoltWire
Debian DSA-2651-1 : smokeping - XSS vulnerability
A cross-site scripting vulnerability was discovered in smokeping, a latency logging and graphing system. Input passed to the 'displaymode'parameter was not properly sanitized. An attacker could use this flaw to execute arbitrary HTML and script code in a user's browser session in the context of a...
Family Connections CMS 2.5.02.7.1 - less.php Remote Command Execution
Family Connections CMS 2.5.02.7.1 - less.php Remote Command Execution $theme = isset$argv1 ? $argv1 : 'default'; system"clear"; if fileexists"$dir/themes/$theme/style.css" echo "\n themes/$theme/style.css already exists.\n\n"; echo "Overwrite y/n ? "; $handle = fopen "php://stdin","r"; $line =...
Family Connections CMS 2.7.1 Remote Command Execution
$theme = isset$argv1 ? $argv1 : 'default'; system"clear"; if fileexists"$dir/themes/$theme/style.css" echo "\n themes/$theme/style.css already exists.\n\n"; echo "Overwrite y/n ? "; $handle = fopen "php://stdin","r"; $line = fgets$handle; if trim$line != 'y' exit; $worked = system"php -q...
CVE-2011-2651
The CVE-2011-2651 entry concerns the Kiwi file browser prior to 3.74.2 (used in SUSE Studio 1.1 prior to 1.1.4). A vulnerability in the file browser allows remote attackers to execute arbitrary code via a crafted filename. The connected sources confirm the affected software and the nature of impa...
Google Chrome multiple vulnerabilities - July 10
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnjul10.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - July 10 Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH,...
CVE-2010-2651
CVE-2010-2651 affects Google Chrome’s CSS rendering in versions before 5.0.375.99, where improper style rendering could allow remote attackers to trigger memory corruption (DoS or other impact) via unknown vectors. Documented in OpenVAS/Ubuntu USN entries and the Chrome 5.0.375.99 update (July 20...
Fedora Core 11 FEDORA-2009-9405 (asterisk)
The remote host is missing an update to asterisk announced via advisory FEDORA-2009-9405. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
Fedora Core 11 FEDORA-2009-9405 (asterisk)
The remote host is missing an update to asterisk announced via advisory FEDORA-2009-9405. OpenVAS Vulnerability Test $Id: fcore20099405.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-9405 asterisk Authors: Thomas Reinke Copyright: Copyright c 2009...
DEBIAN-CVE-2009-2651
main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...
CVE-2009-2651
CVE-2009-2651 affects Asterisk Open Source 1.6.1 up to, but not including, 1.6.1.2. A remote attacker can trigger a Denial of Service by sending an RTP text frame without a required delimiter, causing a NULL pointer dereference and an invalid pointer calculation. The issue is mitigated by upgradi...