Mageia: Security Advisory (MGASA-2020-0065)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:2682-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2682

CVE-2013-2682 affects Cisco Linksys E4200, firmware 1.0.05 Build 7. It describes a Clickjacking vulnerability that could allow remote attackers to obtain sensitive information. The provided connected documents confirm the affected product and vulnerability type, but there are no explicit remediat...

Oracle VirtualBox Security Update (cpujan2020 - 01) - Mac OS X

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

CVE-2020-2682

CVE-2020-2682 affects Oracle VM VirtualBox (Core) with vulnerable versions prior to 5.2.36, 6.0.16, and 6.1.2. The issue, described as an easily exploitable vulnerability, allows a high-privilege attacker with local access to compromise Oracle VM VirtualBox, with potential takeover and impact to ...

CVE-2019-2682

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Attachments / File Upload. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker wit...

CVE-2019-2682

CVE-2019-2682 affects Oracle E-Business Suite Applications Framework (OA Framework) with the Attachments / File Upload subcomponent. Affected versions: 12.1.3, 12.2.3–12.2.8. Description: unauthenticated attacker with network access over HTTP can compromise OA Framework; attacks require human int...

Oracle E-Business Suite Multiple Vulnerabilities (Apr 2019 CPU)

The version of Oracle E-Business installed on the remote host is missing the April 2019 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the April 2019 Critical Patch Update advisory : - An unspecified flaw exists in the Oracle Advanced Outbound...

CVE-2018-2682

CVE-2018-2682 affects Oracle Financial Services Liquidity Risk Management, subcomponent User Interface, in Oracle Financial Services Applications (version 8.0.x). The vulnerability allows an unauthenticated attacker with network access via HTTP to potentially compromise the Liquidity Risk Managem...

CVE-2018-2682

Vulnerability in the Oracle Financial Services Liquidity Risk Management component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...

CVE-2016-2682

...

CVE-2016-2682

CVE-2016-2682 is rejected/not used per initial description.

CVE-2017-2682

CVE-2017-2682 concerns Siemens RUGGEDCOM NMS web application CSRF vulnerability. The issue affects RUGGEDCOM NMS versions prior to V2.1.0 and involves the web interface on ports 8080/TCP and 8081/TCP, where a remote attacker could induce an authenticated user to perform administrative operations ...

kfox.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-207071 Description| Value ---|--- Affected Website:| kfox.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-2682-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2682-1 advisory. A flaw was discovered in the kvm kernel virtual machine subsystem's kvmapichasevents function. A unprivileged local user could exploit this flaw to cause...

[SECURITY] [DLA 251-2] zendframework regression update

Package : zendframework Version : 1.10.6-1squeeze4 CVE ID : CVE-2012-6531 CVE-2012-6532 CVE-2014-2681 CVE-2014-2682 CVE-2014-2683 CVE-2014-2684 CVE-2014-2685 CVE-2014-4914 CVE-2014-8088 CVE-2014-8089 CVE-2015-3154 Debian Bug : 743175 754201 The previous zendframework upload incorrectly fixes...

DLA-251-2 zendframework - regression update

Bulletin has no description...

Debian DLA-251-2 : zendframework regression update

The previous zendframework upload incorrectly fixes CVE-2015-3154, causing a regression. This update corrects this problem. Thanks to Evgeny Smolin . CVE-2012-6531 Pdraic Brady identified a weakness to handle the SimpleXMLElement zendframework class, allowing to remote attackers to read arbitrary...

DLA-251-1 zendframework - security update

Bulletin has no description...

[SECURITY] [DSA 3265-1] zendframework security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3265-1 [email protected] http://www.debian.org/security/ David PrA©vot May 20, 2015 http://www.debian.org/security/faq -...