147 matches found
CVE-2014-2960
This CVE concerns Vision Critical before 2014-05-30, where an information-disclosure vulnerability allowed reading arbitrary files via unspecified vectors, demonstrated with image and configuration files. Affected product: Vision Critical cloud-based intelligent user management platform (pre-2014...
Cisco IOS and IOS XE Software Cluster Management Protocol Remote Code Execution Vulnerability (CVE-2017-3881)
详情来源：https://artkond.com/2017/04/10/cisco-catalyst-remote-code-execution/ Do you still have telnet enabled on your Catalyst switches? Think twice, here’s a proof-of-concept remote code execution exploit for Catalyst 2960 switch with latest suggested firmware. Check out the exploit code here. What...
Cisco Catalyst 2960 and 3750 Series Switches Denial of Service Vulnerability
The Cisco Catalyst 2960 and 3750 Series Switches for IOS are Cisco switches running the Cisco IOS operating system. A denial of service vulnerability exists in the Cisco Catalyst 2960 and 3750 Series Switches for IOS. An attacker could exploit this vulnerability to cause a denial of service...
Adobe Reader < 11.0.19 / 15.006.30279 / 15.023.20053 Multiple Vulnerabilities (APSB17-01) (macOS)
The version of Adobe Reader installed on the remote macOS or Mac OS X host is prior to 11.0.19, 15.006.30279, or 15.023.20053. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist due to improper validation of unspecified input. An unauthenticated,...
CVE-2017-2960
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable memory corruption vulnerability in the image conversion engine, related to parsing of EXIF metadata. Successful exploitation could lead to arbitrary code execution...
CVE-2017-2960
CVE-2017-2960 affects Adobe Acrobat/Reader's image conversion engine, due to memory corruption when parsing EXIF metadata. Affected products include Acrobat Reader versions 11.0.18 and earlier, 15.006.30244 and earlier, and 15.020.20042 and earlier. Successful exploitation could lead to arbitrary...
IBM WebSphere Application Server DoS Vulnerability (swg21984796)
IBM WebSphere Application server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2016-2960
IBM WebSphere Application Server WAS 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty before Liberty Fix Pack 16.0.0.3, and 9.0.0.x before 9.0.0.1 allows remote attackers to cause a denial of service via crafted SIP messages...
CVE-2016-2960
IBM WebSphere Application Server WAS 7.x before 7.0.0.43, 8.0.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 8.5.0.x and 16.0.0.x Liberty before Liberty Fix Pack 16.0.0.3, and 9.0.0.x before 9.0.0.1 allows remote attackers to cause a denial of service via crafted SIP messages...
CVE-2016-2960
CVE-2016-2960 affects IBM WebSphere Application Server: 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.0.x before 8.5.5.10, 9.0.x before 9.0.0.1 (Liberty as applicable). Description: remote denial of service via crafted SIP messages. CVSS v3.0 base score 3.7 (LOW). IBM security bulletins (and Ne...
Ubuntu 14.04 LTS / 16.04 LTS : Oxide vulnerabilities (USN-2960-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2960-1 advisory. An out of bounds write was discovered in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potential...
CVE-2015-2960
NetFlow Analyzer (Zoho) is affected by a Cross-site scripting (XSS) vulnerability in builds 10250 and earlier. The flaw allows remote attackers to cause arbitrary script execution in users’ browsers via unspecified vectors. Affected product: Zoho NetFlow Analyzer; vulnerable component is the web ...
CVE-2015-2960
Cross-site scripting XSS vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Debian DSA-2960-1 : icedove - security update
Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: multiple memory safety errors and buffer overflows may lead to the execution of arbitrary code or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2013-2960
Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1 before...
CVE-2013-2960
The CVE-2013-2960 issue affects IBM Tivoli Monitoring (ITM) Basic Services, specifically the KDSMAIN HTTP processing, where a crafted URL can trigger a buffer overflow and cause a segmentation fault (remote DoS). Affected ITM versions include 6.2.0–6.2.3 with various FP levels (notably FP3 for 6....
CVE-2012-2960
CVE-2012-2960 affects HP ArcSight Connector Appliance 6.2.0.6244.0 and ArcSight Logger 5.2.0.6288.0, with a cross-site scripting (XSS) flaw in the file import feature that allows a crafted file to execute arbitrary script in the web GUI. CERT/HP notes remote disclosure of information, and possibl...
HP Arcsight Logger and Connector appliances cross-site scripting vulnerability
Overview HP's Arcsight Connector appliance v6.2.0.6244.0 and Arcsight Logger appliance v5.2.0.6288.0 and possibly other versions contain a file import facility which is vulnerable to cross-site scripting XSS. Description The supplied facility for importing host data from a file System Admin Tab |...
CVE-2011-2960
The CVE-2011-2960 entry concerns Sunway ForceControl WebServer (httpsvr.exe) 6.0.5.3 running on ForceControl 6.1 (SP1, SP2, SP3). The Red Hat/NVD/OpenVAS records identify a heap-based buffer overflow in httpsvr.exe that can be triggered by a crafted URL, enabling remote denial of service and pote...
