87 matches found
CVE-2013-3213
CVE-2013-3213 affects vtiger CRM 5.0.0–5.4.0, exposing multiple SQL injection vectors via SOAP services. Vulnerable code paths include get_picklists in /soap/customerportal.php, get_tickets_list in /soap/customerportal.php, and SearchContactsByEmail in /soap/thunderbirdplugin.php and /soap/vtiger...
IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities
The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...
Critical: Red Hat Security Advisory: java-1.6.0-ibm security update
Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...
Oracle Java SE Multiple Vulnerabilities (February 2013 CPU) (Unix)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 7 Update 13 or 6 Update 39, or is earlier than or equal to 5 Update 38 or 1.4.2 Update 40. It is, therefore, potentially affected by security issues in the following components : - 2D - AW...
Ubuntu: Security Advisory (USN-1724-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Java SE Multiple Vulnerabilities -01 Feb 13 (Windows)
This host is installed with Oracle Java SE and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboraclejavasemultvuln01feb13win.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE Multiple Vulnerabilities -01 Feb 13 Windows Authors: Arun Kallavi Copyright: Copyright c 2013...
Critical: Red Hat Security Advisory: java-1.7.0-oracle security update
Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...
Critical: Red Hat Security Advisory: java-1.6.0-sun security update
Updated java-1.6.0-sun packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...
CVE-2012-3213
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scripting...
CVE-2012-3213
CVE-2012-3213 is listed in connected IBM advisories alongside multiple JRE vulnerabilities. The Nessus/NASL entry confirms an unspecified vulnerability in Oracle JRE (Java SE 7u11 and 6u38) that could affect confidentiality, integrity, and availability through scripting, with remote exploitation....
CVE-2012-3213
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scripting...
Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006)
This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2011-006. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2011-3213
The CVE-2011-3213 issue affects Apple Mac OS X File Systems prior to 10.7.2. It concerns how WebDAV HTTPS certificates are tracked: if a user accepts a certificate for the initial connection, a MITM attacker could later present a different certificate to hijack the connection. The root cause is i...
CVE-2010-3213
Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...
CVE-2010-3213
CVE-2010-3213 is a CSRF in Microsoft Outlook Web Access (OWA) for Exchange Server 2007–SP2. The vulnerability allows an authenticated user to be tricked into performing Outlook actions (e.g., creating or modifying outbound rules) via forged requests, hijacking the user’s session in the OWA contex...
CVE-2010-3213
Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...
CVE-2010-3213
creationtimestamp| type| source ---|---|--- 2010-07-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14285...
CVE-2009-3213
The CVE-2009-3213 issue is a stack-based buffer overflow in broid 1.0 Beta 3a, exposing remote denial of service and potential arbitrary code execution via a long string in an MP3 file. Multiple sources (NVD, CVE lists, PRION) corroborate the same description. No specific vulnerable versions beyo...
CVE-2009-3213
creationtimestamp| type| source ---|---|--- 2009-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9457...
CVE-2008-3213
The provided connected documents confirm a SQL injection vulnerability in WebCMS Portal Edition specifically in secciones/tablon/tablon.php, exploitable via the id parameter passed to portal/index.php in a tablon action. The root cause is unsanitized input leading to arbitrary SQL execution. Repo...