240 matches found
CVE-2012-3139
CVE-2012-3139 concerns the Oracle Application Object Library in Oracle E-Business Suite 11.5.10.2 . Descriptions indicate an unspecified vulnerability related to Signon (local and SSO) that could affect integrity . Connected documents provide the affected product/component and impact but do not r...
CVE-2010-3139
CVE-2010-3139 refers to an untrusted search path/insecure library loading vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe). Multiple sources describe that a Trojan horse imm.dll located in the same folder as a .grp file can be hijacked to execute arbitrary code, potentiall...
CVE-2010-3139
creationtimestamp| type| source ---|---|--- 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14758...
SLES10: Security update for ethereal
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal ethereal-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...
SLES10: Security update for ethereal
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal ethereal-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...
SLES9: Security update for ethereal
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5033780 within the Su...
SLES9: Security update for ethereal
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ethereal For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5033780 within the Su...
SuSE9 Security Update : ethereal (YOU Patch Number 12225)
Various vulnerabilities have been fixed in ethereal: CVE-2008-3137, CVE-2008-3138, CVE-2008-3139, CVE-2008-3140, CVE-2008-3141, CVE-2008-3145 and CVE-2008-3146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
openSUSE Security Update : wireshark (wireshark-149)
Various vulnerabilities have been fixed in wireshark: CVE-2008-3137, CVE-2008-3138, CVE-2008-3139, CVE-2008-3140, CVE-2008-3141, CVE-2008-3145 and CVE-2008-3146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUS...
Mandriva Linux Security Advisory : wireshark (MDVSA-2008:152)
A number of vulnerabilities were discovered in Wireshark that could cause it to crash while processing malicious packets CVE-2008-3137, CVE-2008-3138, CVE-2008-3139, CVE-2008-3140, CVE-2008-3141, CVE-2008-3145. This update provides Wireshark 1.0.2, which is not vulnerable to these issues...
Fedora Update for wireshark FEDORA-2008-6440
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
SuSE 10 Security Update : ethereal (ZYPP Patch Number 5520)
Various vulnerabilities have been fixed in wireshark: CVE-2008-3137 / CVE-2008-3138 / CVE-2008-3139 / CVE-2008-3140 / CVE-2008-3141 / CVE-2008-3145 / CVE-2008-3146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...
openSUSE 10 Security Update : wireshark (wireshark-5515)
Various vulnerabilities have been fixed in wireshark: CVE-2008-3137, CVE-2008-3138, CVE-2008-3139, CVE-2008-3140, CVE-2008-3141, CVE-2008-3145 and CVE-2008-3146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUS...
[ GLSA 200808-04 ] Wireshark: Denial of Service
Gentoo Linux Security Advisory GLSA 200808-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
CVE-2008-3139
The CVE-2008-3139 issue affects Wireshark (formerly Ethereal) with the RTMPT dissector vulnerable in versions 0.99.8 through 1.0.0, allowing remote denial of service (crash). The description cites a possible use-after-free root cause, but the exact exploit vectors are not detailed here. Several O...
SuSE 10 Security Update : jasper (ZYPP Patch Number 3139)
This update fixes two problems in libjasper that occured while parsing image files. Both bugs lead to memory corruption. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2007-3139
The CVE-2007-3139 entry applies to Quick.Cart versions 2.2 and earlier. According to connected records, the root cause is in config/general.php where a default username and password are used, permitting remote attackers to authenticate via an admin.php login action. The practical consequence is t...
CVE-2006-4225
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-3139. Reason: This candidate is a duplicate of CVE-2006-3139. Notes: All CVE users should reference CVE-2006-3139 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2006-3139
CVE-2006-3139 concerns multiple SQL injection flaws in war.php of Virtual War (VWar) 1.5.0 R14 and earlier. The vulnerability arises in the war.php handler, where user-supplied input through the parameters (s, showgame, sortorder, sortby) is used to construct SQL queries, enabling remote attacker...