73 matches found
CVE-2018-2656
Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Data Manager Server. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with...
Oracle E-Business Multiple Vulnerabilities (January 2018 CPU)
The version of Oracle E-Business installed on the remote host is missing the January 2018 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the January 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs f...
CVE-2016-2656
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-2656
CVE-2016-6320 is a cross-site scripting (XSS) vulnerability in Foreman prior to 1.12.2, exploitable by remote authenticated users via the network interface device identifier in the host interface form (host_edit_interfaces.js). Affected product: Foreman before 1.12.2. Root cause: input handling i...
CVE-2014-2656
This CVE entry is rejected/not used and does not represent an active vulnerability.
Oracle: Security Advisory (ELSA-2015-2656)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Design/Logic Flaw
Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624,...
CVE-2015-2656
Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624,...
CVE-2015-2656
Technical details for CVE-2015-2656 are not publicly available in the provided documents; monitor for updates from trusted sources.
Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2656-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2656-1 advisory. Karthikeyan Bhargavan discovered that NSS incorrectly handled state transitions for the TLS state machine. If a remote attacker were able to perform a...
Debian DSA-2656-1 : bind9 - denial of service
Matthew Horsfall of Dyn, Inc. discovered that BIND, a DNS server, is prone to a denial of service vulnerability. A remote attacker could use this flaw to send a specially crafted DNS query to named that, when processed, would cause named to use an excessive amount of memory, or possibly crash...
Debian: Security Advisory (DSA-2656-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-2656
The connected Nessus entry for NOVELL_ZENWORKS_HANDHELD_MANAGEMENT_ZFHSRV_CODE_EXECUTION.NASL confirms that the ZENworks Handheld Management Server component ZfHSrvr.exe contains multiple remote code execution vulnerabilities that allow an attacker to run arbitrary code in the context of the ZfHS...
CVE-2010-2656
CVE-2010-2656 affects IBM BladeCenter AMM firmware BPET48L (and possibly earlier 4.7/5.0). The issue: sensitive data is stored under the web root with insufficient access control, enabling remote attackers to download sensitive files (e.g., logs or core files) via direct requests, demonstrated by...
CVE-2010-2656
creationtimestamp| type| source ---|---|--- 2010-07-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14237...
Design/Logic Flaw
The com.android.phone process in Android 1.5 CRBxx allows remote attackers to cause a denial of service application restart and network disconnection via an SMS message containing a malformed WAP Push message that triggers an ArrayIndexOutOfBoundsException exception, possibly a related issue to...
Design/Logic Flaw
An unspecified function in the Dalvik API in Android 1.5 and earlier allows remote attackers to cause a denial of service system process restart via a crafted application, possibly a related issue to CVE-2009-2656...
CVE-2009-2656
The CVE-2009-2656 entry concerns an unspecified vulnerability in the com.android.phone process on Android 1.0/1.1/1.5 that allows remote attackers to cause a denial of service (network disconnection) by sending a crafted SMS. The issue was demonstrated by Collin Mulliner and Charlie Miller at Bla...