165 matches found
CVE-2019-2700
Vulnerability in the PeopleSoft Enterprise ELM component of Oracle PeopleSoft Products subcomponent: Enterprise Learning Mgmt. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...
CVE-2019-2700
The CVE-2019-2700 entry concerns Oracle PeopleSoft’s Enterprise Learning Management (ELM) in PeopleSoft 9.2. The Red Hat and NVD records describe a vulnerability enabling a low-privileged attacker, over HTTP with network access, to perform unauthorized updates/inserts/deletes on certain ELM data....
CVE-2018-2700
The CVE-2018-2700 entry concerns Oracle Hospitality Cruise Fleet Management (Oracle Hospitality Applications), subcomponent Emergency Response System. Affected product: Cruise Fleet Management version 9.0.4.0. Root cause/impact: unauthenticated, network-accessible via HTTP attacker can access dat...
CVE-2017-2700
The CVE-2017-2700 entry affects Huawei AC6005 and AC6605 devices running V200R006C10, where a DoS can be triggered by malformed packets. The underlying cause is insufficient input validation to parsed network data, leading to memory leakage and partial to full service disruption (DoS). Connected ...
CVE-2016-2700
This CVE entry is rejected/not used; it does not represent an active vulnerability entry.
CVE-2011-2700
Multiple buffer overflows in the si4713writeecontrolstring function in drivers/media/radio/si4713-i2c.c in the Linux kernel before 2.6.39.4 on the N900 platform might allow local users to cause a denial of service or have unspecified other impact via a crafted sextctrls operation with a 1...
Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2700-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2700-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable Networ...
Ubuntu: Security Advisory (USN-2700-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-2700
Cross-site request forgery CSRF vulnerability in the Add/Edit page adminmenus.php in the WP125 plugin before 1.5.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that add or edit an ad via unspecified vectors...
CVE-2013-2700
Vulnerability: CSRF in WP125 WordPress plugin (Add/Edit page adminmenus.php) affecting versions before 1.5.0. Attackers could hijack admin sessions to add/edit ads via unspecified vectors. Impact: unauthorized actions on admin-privileged functionality. Remediation: upgrade the WP125 plugin to ver...
CVE-2013-5703
The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code, and modify settings or the DNS cache, via a crafted SSID value that is not properly handled during insertion into the sWlessSurvey value in variables.js...
Code injection
The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code, and modify settings or the DNS cache, via a crafted SSID value that is not properly handled during insertion into the sWlessSurvey value in variables.js...
CVE-2013-5703
CVE-2013-5703 affects the DrayTek Vigor 2700 router (notably v2.8.3) where a crafted SSID value is mishandled when inserted into the sWlessSurvey list in variables.js. This enables remote attackers to execute arbitrary JavaScript in the router’s web administration context and to modify settings o...
CVE-2013-5703
The DrayTek Vigor 2700 router 2.8.3 allows remote attackers to execute arbitrary JavaScript code, and modify settings or the DNS cache, via a crafted SSID value that is not properly handled during insertion into the sWlessSurvey value in variables.js...
DrayTek Vigor 2700 ADSL router contains a command injection vulnerability
Overview DrayTek Vigor 2700 ADSL router version 2.8.3 and possibly earlier versions contain a command injection vulnerability via malicious SSID CWE-77. Description CWE-77: Improper Neutralization of Special Elements used in a Command 'Command Injection' DrayTek Vigor 2700 ADSL router version 2.8...
Debian DSA-2700-1 : wireshark - several vulnerabilities
Multiple vulnerabilities were discovered in the dissectors for GTPv2, ASN.1 BER, PPP CCP, DCP ETSI, MPEG DSM-CC and Websocket, which could result in denial of service or the execution of arbitrary code. The oldstable distribution squeeze is not affected. %NASLMINLEVEL 70300 C Tenable Network...
Debian: Security Advisory (DSA-2700-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware: Security Advisory (SSA:2005-251-02)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...