117 matches found
CVE-2019-4718
IBM Jazz for Service Management 3.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172123...
CVE-2019-4718
IBM Jazz for Service Management is vulnerable to cross‑site scripting (CVE-2019-4718) in its Web UI, potentially allowing injection of arbitrary JavaScript and credential disclosure within a trusted session. The CVE entry notes affected version 3.13 with an overall CVSS v3.0 base score of 5.4 (ME...
StoreFront 3.13 - Propagation fails An error occurred running the command: Add-DSFeatureInstances
Both StoreFront servers are Server 2012R2 fresh install and fully updated. Clean install of SF 3.13 completed successfully on both servers. Log Name: Citrix Delivery Services Source: Citrix Configuration Replication Service Level : Error Description : An error occurred running the command:...
Linux kernel contention condition denial of service vulnerability (CNVD-2016-02777)
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A contention condition denial of service vulnerability exists in versions of Linux kernel prior to 3.13-rc4-next-20131218, which can be exploited by a local attacker to cause ...
Linux Kernel 3.13/3.14 (Ubuntu) - 'splice()' System Call Local Denial of Service
/ ---------------------------------------------------------------------------------------------------- cve-2014-7822poc.c The implementation of certain splicewrite file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file which allows loca...
UBUNTU-CVE-2014-8172
The filesystem implementation in the Linux kernel before 3.13 performs certain operations on lists of files with an inappropriate locking approach, which allows local users to cause a denial of service soft lockup or system crash via unspecified use of Asynchronous I/O AIO operations...
CVE-2014-7284
The netgetrandomonce implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by...
CVE-2014-7284
The netgetrandomonce implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by...
MicroTik RouterOS <= 3.13 SNMP write (Set request) PoC
No description provided by source. / -------------------------------------------------------------------------- c ShadOS 2008 | || || | | |/ / | || | | / - | | ' | ' | / | ' \ - |||||||\|||, |||// hellknights.void.ru |/ .0x48k...
[oss-security] Linux kernel futex local privilege escalation (CVE-2014-3153)
Hi, This was handled via linux-distros, hence the mandatory oss-security posting. The issue was made public earlier today, and is included in this Debian advisory: https://lists.debian.org/debian-security-announce/2014/msg00130.html --- CVE-2014-3153 Pinkie Pie discovered an issue in the futex...
Linux Kernel "inet_frag_intern()"竞争条件漏洞
CVE ID:CVE-2014-0100 Linux Kernel是一款开源的操作系统。 Linux Kernel在"inetfragintern"函数net/ipv4/inetfragment.c的实现上存在竞争条件漏洞，攻击者通过特制的ICMP Echo请求，利用此漏洞可造成间接引用已经释放的内存。 0 Linux kernel 3.13.x Linux kernel 3.12.x Linux kernel 3.10.x 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.kernel.org/...
Linux Kernel 'arch_dup_task_struct()'函数本地拒绝服务漏洞
Bugtraq ID:66477 Linux Kernel是一款开源的操作系统。 Linux Kernel "archduptaskstruct"函数arch/powerpc/kernel/process.c存在错误，允许攻击者利用特殊的指令序列使系统崩溃。漏洞影响运行在PowerPC的系统。 0 Linux Kernel 3.12.x Linux Kernel 3.13.x Linux Kernel 3.12.15或3.13.7已经修复该漏洞，建议用户下载更新： https://www.kernel.org...
PT-2013-4965 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.13 Description: The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This can be achieved by sending a packet with IPIP encapsulation that contains a small value in th...
CVE-2008-6832
Technical details about CVE-2008-6832 are not publicly available in the provided documents; no concrete affected product/version, impact, or fix is stated. Monitor for updates.
OBlog (tags. asp) Remote SQL Injection Exploit-vulnerability warning-the black bar safety net
The official has been fixed the vulnerability. –==+=================== www.nspcn.org =================+==– –==+ OBlog tags. asp Remote SQL Injection Exploit +==– –==+====================================================================================+==– Author: Whytt & Tr4c3at1 2 6dotcom...
MailEnable ProfessionalEnterprise 3.13 - Fetch (Authenticated) Remote Buffer Overflow
MailEnable ProfessionalEnterprise 3.13 - Fetch Authenticated Remote Buffer Overflow !/usr/bin/perl ================================================================= MailEnable Professional gmail.com 10.3.2008 ..enjoy!: ================================================================= use...
CVE-2008-1277
The IMAP service MEIMAPS.exe in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service crash via 1 SEARCH and 2 APPEND commands without required arguments, which triggers a NULL pointer dereference...