112 matches found
CVE-2012-3514
OCaml Xml-Light Library before r234 is affected by a hash collision vulnerability that can cause a denial of service (CPU consumption). The root cause is computing hash values without restricting predictable collisions. Affected component: ocaml-xml-light before r234. Impact: context-dependent at...
[Onapsis Security Advisory 2012-07] Oracle JD Edwards SawKernel SET_INI Configuration Modification
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisory: Oracle JD Edwards SawKernel SETINI Configuration Modification This advisory can be downloaded in PDF format from http://www.onapsis.com/. By downloading this advisory from the Onapsis Resource Center, you will gain access to...
CVE-2011-3514
CVE-2011-3514 affects Oracle JD Edwards EnterpriseOne Tools (JD Edwards 8.98 SP 24 / JD Edwards EnterpriseOne Server + Tools 9.0/8.98) via the JDENET SAW kernel. A specially crafted JDENET message can remotely modify the JDE.INI configuration file, enabling remote compromise of the ERP system. Ex...
CVE-2010-3514
CVE-2010-3514 affects Oracle iPlanet Web Server (Sun Java System Web Server) 7.0.x prior to 7.0.9. The vulnerability is in the Web Container and enables HTTP response splitting via crafted responses (CR/LF handling in headers). CVSS 2.0 base score is 4.3 (Network, Medium complexity, no auth; inte...
CVE-2009-3514
Multiple SQL injection vulnerabilities in d.net CMS allow remote attackers to execute arbitrary SQL commands via 1 the page parameter to index.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the 2 editid and 3 p parameter in a news action to...
CVE-2009-3514
Consolidated data for CVE-2009-3514 confirms concrete details: affected software is d.net CMS, with two vulnerable paths. SQL injection could be exploited via the page parameter in index.php, and via the edit_id and _p parameters in dnet_admin/index.php, potentially allowing remote command execut...
CVE-2009-3514
creationtimestamp| type| source ---|---|--- 2009-07-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9312...
VMSA-2008-0012 Updated VirtualCenter addresses User Account Disclosure Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2008-0012 Synopsis: Updated VirtualCenter addresses User Account Disclosure Vulnerability Issue date: 2008-08-12 Updated on: 2008-08-...
CVE-2008-3514
CVE-2008-3514 affects VMware VirtualCenter: versions 2.5 before Update 2 and 2.0.2 before Update 5 expose an information disclosure through client-side enabled/disabled functionality that can reveal usernames of system accounts. The root cause is a permission-control weakness in the GUI enabling ...
CVE-2007-3514
CVE-2007-3514 describes a cross-domain vulnerability in Apple Safari for Windows 3.0.2 where JavaScript that overwrites the document variable and statically assigns the document.domain to a file:// location bypasses the Same Origin Policy and allows access to restricted information from other dom...
CVE-2006-3514
PHP-Blogger 2.2.5 (and possibly earlier) has multiple cross-site scripting (XSS) vulnerabilities in admin/actions.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the parameters: name, title, news, description, and sitename. The CVE notes only the presence of XSS w...