CVE-2019-2954

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with logon to the infrastructu...

CVE-2019-2954

Oracle CVE-2019-2954 affects the Core RDBMS component of Oracle Database Server. Affected versions are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. The vulnerability can be exploited by a low-privilege user with Create Session and Create Procedure privileges who can log on to the infrastructure whe...

Oracle E-Business Multiple Vulnerabilities (July 2018 CPU)

The version of Oracle E-Business installed on the remote host is missing the July 2018 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the July 2018 Critical Patch Update advisory : - An unspecified vulnerability in the Oracle One-to-One...

CVE-2018-2954

CVE-2018-2954 affects Oracle E-Business Suite Order Management, specifically the Product Diagnostic Tools subcomponent. The vulnerability impacts multiple supported 12.1.x and 12.2.x versions; it is exploitable by a low-privileged user with login to the hosting infrastructure and can lead to take...

Adobe Reader < 11.0.19 / 15.006.30279 / 15.023.20053 Multiple Vulnerabilities (APSB17-01) (macOS)

The version of Adobe Reader installed on the remote macOS or Mac OS X host is prior to 11.0.19, 15.006.30279, or 15.023.20053. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist due to improper validation of unspecified input. An unauthenticated,...

CVE-2017-2954

CVE-2017-2954 relates to Adobe Acrobat Reader. The vulnerability is a memory corruption issue in the Image Conversion component when handling malformed TIFF images, affecting versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. Successful exploitation could lead t...

SUSE SLED12 / SLES12 Security Update : util-linux (SUSE-SU-2016:2954-1)

This update for util-linux fixes the following issues : - Consider redundant slashes when comparing paths bsc982331, util-linux-libmount-ignore-redundant-slashes.patch, affects backport of util-linux-libmount-cifs-ismounted.patch. - Use upstream compatibility patches for --show-pt-geometry with...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-3008...

Cross site scripting

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-2956...

CVE-2016-2954

Cross-site scripting XSS vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2956 and CVE-2016-3008...

CVE-2016-2954

CVE-2016-2954 is an XSS vulnerability in the IBM Connections Web UI. Affects IBM Connections 5.0 before CR4 and 5.5 before CR1; remote authenticated users can inject arbitrary web script or HTML via unspecified vectors. This entry is differentiated from CVE-2016-2956 and CVE-2016-3008. The provid...

Ubuntu 16.04 LTS : MySQL vulnerabilities (USN-2954-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2954-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to...

CVE-2015-2954

Cross-site request forgery CSRF vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-2954

The CVE concerns Igreks MilkyStep products vulnerable to Cross-Site Request Forgery (CSRF, CWE-352). Affected components are MilkyStep Light version 0.94 and earlier, MilkyStep Professional version 1.82 and earlier, and related OEM/builds. If a logged-in user views a malicious page, an attacker c...

HP OpenView NNM 7.5.1 - ovalarmsrv.exe Remote Overflow Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : HP OpenView Network Node Manager v7.5 ---------------------------------------- Exploit : HP OpenView NNM v7.5.1 ovalarmsrv.exe Remote Buffer Overflow Exploit Exploit date : 07.04.2008 Exploit...

CVE-2013-2954

CVE-2013-2954 affects IBM InfoSphere Optim Data Growth for Oracle E-Business Suite (versions 6.0–9.1). The IBM bulletin documents an inadequate account lockout: the Optim E-Business Console login page does not limit consecutive incorrect authentication attempts, enabling potential brute-force acc...

CVE-2011-2954

CVE-2011-2954 is a use-after-free vulnerability in RealNetworks RealPlayer, affecting RealPlayer 11.0–11.1 and 14.0.0–14.0.5 (and RealPlayer SP 1.0–1.1.5) when using an Embedded RealPlayer. The issue occurs in the Embedded AutoUpdate path and can allow remote attackers to execute arbitrary code v...

openSUSE Security Update : kernel (openSUSE-SU-2010:0895-2)

This security update of the SUSE Linux Enterprise 11 GA kernel updates the kernel to 2.6.27.54 and fixes various security issues and other bugs. Following security issues were fixed: CVE-2010-3310: Multiple integer signedness errors in net/rose/afrose.c in the Linux kernel allowed local users to...

Ubuntu: Security Advisory (USN-1083-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 3276 / 3280 / 3284)

This SUSE Linux Enterprise 11 Service Pack 1 kernel contains various security fixes and lots of other bugfixes. The following security issues were fixed : - local users could crash the system by causing a NULL deref in the keyctlsessiontoparent function. CVE-2010-2960 - local users could crash th...