Oracle Document Capture empop3.dll — insecure method

Application: Oracle Document Capture Versions Affected: 6.4 — 7.2 Vendor URL: http://www.oracle.com Bugs: Insecure method, File overwriting, File deleting Exploits: YES Reported: 22.03.2010 Vendor response: 31.03.2010 Date of Public Advisory: 24.01.2011 CVE-number:CVE-2010-3591 Author: Evdokimov...

Fedora Update for automake14 FEDORA-2010-3591

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Core 10 FEDORA-2009-10385 (dopewars)

The remote host is missing an update to dopewars announced via advisory FEDORA-2009-10385. OpenVAS Vulnerability Test $Id: fcore200910385.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10385 dopewars Authors: Thomas Reinke Copyright: Copyright c 20...

Fedora Core 11 FEDORA-2009-10439 (dopewars)

The remote host is missing an update to dopewars announced via advisory FEDORA-2009-10439. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Fedora 11 : dopewars-1.5.12-8.1033svn.fc11 (2009-10439)

Fix DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network Securit...

CVE-2009-3591

Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...

CVE-2009-3591

Dopewars 1.5.12 allows remote attackers to cause a denial of service segmentation fault via a REQUESTJET message with an invalid location...

CVE-2009-3591

CVE-2009-3591 affects Dopewars 1.5.12 where the server-side DOs via the Jet command (“REQUESTJET” message) can crash the application due to insufficient input validation. Multiple security scans/docs confirm a remote DoS resulting in a segmentation fault on the server; OpenVAS entries and Metaspl...

CVE-2009-3591

creationtimestamp| type| source ---|---|--- 2009-10-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10004 2009-10-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33269 2018-05-29 15:50:33+00:00| seen|...

Dopewars Denial of Service

The jet command in Dopewars 1.5.12 is vulnerable to a segmentation fault due to a lack of input validation. Module Options msf use auxiliary/dos/misc/dopewars msf undefineddopewars show actions ...actions... msf undefineddopewars set ACTION msf undefineddopewars show options ...show and set...

CVE-2008-3591

The CVE-2008-3591 issue affects Twentyone Degrees Symphony 1.7.01 and earlier, where the lib/class.admin.php login path processes the sym_auth cookie in a database query. The underlying flaw is a SQL injection that allows an attacker to alter queries, potentially bypass authentication and gain ad...

CVE-2008-3591

SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the symauth cookie in a /publish/filemanager/ request to index.php...

CVE-2007-3591

The CVE-2007-3591 issue affects Elite Bulletin Board, prior to version 1.0.10, in the Profile.php handling. The root cause is described as missing authorization checks on a remote form, enabling remote modification of profile information via unspecified vectors. Impact is limited to unauthorized ...

CVE-2006-3591

CVE-2006-3591 affects Microsoft Internet Explorer 6.0. The vulnerability arises when code accesses the URL property of a TriEditDocument.TriEditDocument object before initialization, causing a NULL pointer dereference and an application crash (denial of service). The description consistently stat...

Linux FreeS/WAN 2.02 VPN Detection

Binary data 3591.prm...

CVE-2005-3591

CVE-2005-3591 describes a vulnerability in the Macromedia Flash plugin where Flash.ocx (Windows, 7.0.19.0 and earlier) and libflashplayer.so (Unix, before 7.0.25.0) allow a remote attacker to trigger a denial of service and potentially execute arbitrary code via parameters to the ActionDefineFunc...