89 matches found
CVE-2013-2675
CVE-2013-2675 affects Brother MFC-9970CDW devices running Firmware L. The vulnerability is described as a Frameable response (Clickjacking) that could allow remote attackers to obtain sensitive information. Public materials in the provided documents identify the affected product and vulnerability...
CVE-2020-2675
Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications component: Login. The supported version that is affected is 5.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5...
CVE-2020-2675
CVE-2020-2675 affects Oracle Hospitality OPERA 5 (Oracle Hospitality Applications), specifically the Login component. Affected version is 5.5. The vulnerability allows a low-privilege, network-accessible (HTTP) attacker to compromise OPERA 5, potentially gaining unauthorized access to critical da...
CVE-2020-2675
Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications component: Login. The supported version that is affected is 5.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality OPERA 5...
CVE-2019-2675
CVE-2019-2675 affects Oracle E-Business Suite’s CRM Technical Foundation component (subcomponent: Preferences). Affected versions are 12.1.3, 12.2.3–12.2.8. The vulnerability allows an unauthenticated attacker with network access via HTTP, with user interaction required, to compromise data and po...
CVE-2014-2675
Cross-site request forgery CSRF vulnerability in inc/AdminPage.php in the WP HTML Sitemap plugin 1.2 for WordPress allows remote attackers to hijack the authentication of administrators for requests that delete the sitemap via a request to the wp-html-sitemap page in wp-admin/options-general.php...
CVE-2014-2675
CVE-2014-2675 concerns the WordPress WP HTML Sitemap plugin (version 1.2) and its file inc/AdminPage.php. The vulnerability is a Cross-Site Request Forgery (CSRF) that allows an attacker to hijack the administrator’s authentication to perform a sensitive action: deleting the sitemap via a request...
Solaris 10 (sparc) : 125136-75
JavaSE 6: update 75 patch equivalent to JDK 6u75. Date this patch was last updated by Sun : Apr/14/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; ...
CVE-2018-2675
Vulnerability in the Java Advanced Management Console component of Oracle Java SE subcomponent: Server. The supported version that is affected is Java Advanced Management Console: 2.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...
CVE-2018-2675
CVE-2018-2675 affects Oracle Java SE Java Advanced Management Console Server component (version 2.8) and is described across sources as allowing an unauthenticated, network-accessible attacker to read a subset of data from the Java Advanced Management Console. The connected documents corroborate ...
CVE-2015-2675
The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the restproxycallgeturl function, which allows remote attackers to cause a denial of service application crash via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interfa...
CVE-2015-2675
The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the restproxycallgeturl function, which allows remote attackers to cause a denial of service application crash via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interfa...
CVE-2015-2675
The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the restproxycallgeturl function, which allows remote attackers to cause a denial of service application crash via running the EnsureCredentials method from the org.gnome.OnlineAccounts.Account interfa...
CVE-2015-2675
CVE-2015-2675 affects GNOME librest prior to version 0.7.93, where the OAuth REST helper truncates the pointer returned by rest_proxy_call_get_url. This can enable a remote attacker to cause an application crash (DoS) by invoking EnsureCredentials on an org.gnome.OnlineAccounts.Account Flickr obj...
CVE-2016-2675
CVE-2016-2675 entry is rejected and does not represent an active vulnerability.
Scientific Linux Security Update : rest on SL7.x x86_64 (20151119)
It was found that the OAuth implementation in librest, a helper library for RESTful services, incorrectly truncated the pointer returned by the restproxycallgeturl call. An attacker could use this flaw to crash an application using the librest library. CVE-2015-2675 After installing the update, a...
Oracle Linux 7 : rest (ELSA-2015-2237)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2237 advisory. 0.7.92-3 - Fix tests/proxy-continuous Resolves: 1250935 0.7.92-2 - Fix memory error due to implicit declaration of restproxycallgeturl Resolves: 1183982 Tenable...
Oracle: Security Advisory (ELSA-2015-2237)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 7 : rest (RHSA-2015:2237)
Updated rest packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CV...