CVE-2016-3502

CVE-2016-3502 concerns an unspecified vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware versions 11.1.1.8 and 12.2.1.0 . The description indicates that remote authenticated users can affect confidentiality, integrity, and availability via unknown vectors, but the e...

Debian Security Advisory DSA 3502-1 (roundup - security update)

Ralf Schlatterbeck discovered an information leak in roundup, a web-based issue tracking system. An authenticated attacker could use it to see sensitive details about other users, including their hashed password. After applying the update, which will fix the shipped templates, the site...

Debian DSA-3502-1 : roundup - security update

Ralf Schlatterbeck discovered an information leak in roundup, a web-based issue tracking system. An authenticated attacker could use it to see sensitive details about other users, including their hashed password. After applying the update, which will fix the shipped templates, the site...

Oracle: Security Advisory (ELSA-2016-3502)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2016-3502)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3502 advisory. - KEYS: Don't permit requestkey to construct a new keyring David Howells Orabug: 22373449 CVE-2015-7872 - crypto: add missing crypto module aliases...

SOL17202 - Apache HTTP server vulnerability CVE-2012-3502

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...

CVE-2014-3502

CVE-2014-3502 affects Apache Cordova on Android prior to 3.5.1. The weakness allows remote attackers to open and send data to arbitrary applications by exploiting a crafted Android intent URI scheme, enabling information exposure via manipulated HTML content within a Cordova app. The CVSS base sc...

Apache Cordova 3.5.1: CVE-2014-3502 update

The following text is amended from the original that was sent on August 4th. More background information on this amendment can be found at http://cordova.apache.org/announcements/2014/08/06/android-351-update.html Android Platform Release: 04 Aug 2014 CVE-2014-3502: Cordova apps can potentially...

(CVE-2014-3501/2/3) Apache Cordova for Android - Multiple Vulnerabilities

Hi, We have recently discovered a severe Cross-Application Scripting XAS vulnerability in Apache Cordova for Android. This vulnerability enables theft of sensitive information from Crodova-based apps both locally by malware and also remotely by using drive-by exploitation techniques. In addition,...

CVE-2013-3502

GroundWork Monitor Enterprise 6.7.0 is affected by CVE-2013-3502 via monarch_scan.cgi. The root cause is untrusted user input used in a Perl function (qx), enabling remote authenticated attackers to inject commands and achieve arbitrary code execution and potential data exposure. A Metasploit mod...

CVE-2013-3502

monarchscan.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands, and consequently obtain sensitive information, by leveraging a JOSSO SSO cookie...

CVE-2013-3502

creationtimestamp| type| source ---|---|--- 2013-04-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25001 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/groundworkmonarchcmdexec.rb 2025-02-06 03:13:41+00:00...

CVE-2012-3502

Apache HTTP Server 2.4.x before 2.4.3 is affected by CVE-2012-3502. The vulnerability lies in the proxy components (mod_proxy_ajp.c and mod_proxy_http.c) where the server does not correctly determine when to close a back-end connection, allowing an attacker to read a response intended for a diffe...

CVE-2011-3502

The Cogent DataHub web server (versions up to 7.1.1.63) is affected by CVE-2011-3502, which allows remote attackers to obtain the source code of executable files via a crafted request that includes a trailing space or an encoded dot (%2e). Affected products include Cogent DataHub up to 7.1.1.63 a...

Cogent DataHub Vulnerabilities

Overview This Advisory is a follow-up to the Alert, “ICS-ALERT-11-256-03—COGENT DATAHUB VULNERABILITIES,” that was published September 13, 2011, on the Industrial Control Systems Cyber Emergency Response Team ICS-CERT web page. ICS-CERT is aware of a public report of multiple vulnerabilities in...

CVE-2010-3502

Unspecified vulnerability in the Siebel Core component in Oracle Siebel Suite 7.7.2.12, 7.8.2.14, 8.0.0.10, and 8.1.1.3 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2010-3502

CVE-2010-3502 affects the Siebel Core component of the Oracle Siebel Suite (versions 7.7.2.12, 7.8.2.14, 8.0.0.10, 8.1.1.3). The Siebel risk matrix lists it under Siebel Core with HTTP access, authentication required (Single), and a base CVSS-like rating of 4.0. The vulnerability is described as ...

CVE-2009-3502

The CVE-2009-3502 entry describes an SQL injection in the PHP script music.php of BPowerHouse BPMusic 1.0. The vulnerability is triggered via the music_id parameter, allowing remote attackers to execute arbitrary SQL commands. The connected documents provide the affected product/version and the i...

CVE-2008-3502

CVE-2008-3502 affects Best Practical Solutions RT versions 3.0.0 through 3.6.6. The vulnerability is described as an unspecified issue related to the Perl Devel::StackTrace module that allows remote authenticated users to cause a denial of service via unspecified vectors, potentially consuming CP...

CVE-2007-3502

CVE-2007-3502 affects Kaspersky Anti-Spam before 3.0 MP1. The vulnerability is in the web-based product configuration system, allowing remote attackers to obtain access to certain directories (information disclosure). The NVD entry cites network access with low attack complexity and no authentica...