CVE-2013-3539

CVE-2013-3539 is a CSRF vulnerability in Sony camera web interfaces (command/user.cgi) affecting models such as SNC CH140/CH180/CH240/CH280 and SNC DH140/DH140T/DH180/DH240/DH240T/DH280. The flaw lets remote attackers hijack administrator authentication to issue requests that add users. Public re...

Sony CH / DH Cross Site Request Forgery Vulnerability

Sony CH and DH series IP cameras suffer from a cross site request forgery vulnerability. 1.Advisory Information Title: Sony CH, DH Series Vulnerability Date Published: 12/06/2013 Date of last updated: 12/06/2013 2.Vulnerability Description We have been found the next vulnerability in this devices...

Sony CH / DH Cross Site Request Forgery

=========================================================================== SONY ==================================================================== =========================================================================== 1.Advisory Information Title: Sony CH, DH Series Vulnerability Date...

CVE-2013-3539

creationtimestamp| type| source ---|---|--- 2013-06-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38583...

CVE-2012-3539

CVE-2012-3539 is a duplicate of CVE-2012-4681; the connected data identifies CVE-2012-4681 as an Oracle Java SE JRE Remote Code Execution vulnerability. The issue centers on Java Beans permission checks and sandbox bypass in OpenJDK/OpenJRE affecting Java 7 era components, enabling potential remo...

CVE-2012-3539

creationtimestamp| type| source ---|---|--- 2012-08-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20865...

CVE-2011-3539

Technical details for CVE-2011-3539 are not publicly provided in the supplied documents; no concrete affected product/version or exploit information is available here; monitor for updates.

CVE-2010-3539

Technical details for CVE-2010-3539 are not publicly available in the provided documents. Monitor official advisories and databases for updates.

CVE-2009-3539

CVE-2009-3539 describes multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Ultra Classifieds Pro. The flaws allow remote attackers to inject arbitrary web script or HTML via the (1) cname parameter to subclass.php and (2) sn parameter to listads.php. The associated NVD metrics i...

CVE-2009-3539

creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34745 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34744...

Gentoo Security Advisory GLSA 200601-03 (hylafax)

The remote host is missing updates announced in advisory GLSA 200601-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200601-03 (hylafax)

The remote host is missing updates announced in advisory GLSA 200601-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3539

CVE-2008-3539 affects HP OpenView Select Identity Connectors running on Windows and is a local information disclosure vulnerability. Affected products/versions include: AD Connector ≤ 2.30, SunOne ≤ 1.14, eDirectory ≤ 1.12, eTrust ≤ 1.02, OID ≤ 1.02, IBM Tivoli Dir ≤ 1.02, TOPSecret ≤ 2.22.001, R...

[security bulletin] HPSBMA02361 SSRT080119 rev.1 - HP OpenView Select Identity Connectors running on Windows, Local Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01531379 Version: 1 HPSBMA02361 SSRT080119 rev.1 - HP OpenView Select Identity Connectors running on Windows, Local Information Disclosure NOTICE: The information in this Security Bulletin should...

CVE-2007-3539

creationtimestamp| type| source ---|---|--- 2008-03-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5222...

CVE-2007-3539

Multiple SQL injection vulnerabilities in QuickTicket 1.2 (build:20070621) and QuickTalk Forum 1.3 allow remote attackers to execute arbitrary SQL via parameter misuse in several pages: (1) t and (2) f in qti_ind_post.php and qti_ind_post_prt.php; (3) dir and (4) order in qti_ind_member.php; (5) ...

[SECURITY] [DSA 933-1] New hylafax packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 933-1 [email protected] http://www.debian.org/security/ Michael Stone January 9, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 933-1] New hylafax packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 933-1 [email protected] http://www.debian.org/security/ Michael Stone January 9, 2006 http://www.debian.org/security/faq -...

CVE-2005-3539

CVE-2005-3539 affects HylaFAX up to version 4.2.x (notably 4.2.3 and earlier). The root cause is evaluation of untrusted input in HylaFAX components: the notify script and crafted CallID parameters to faxrcvd, enabling remote attackers to execute arbitrary commands with the HylaFAX server privile...