[SECURITY] [DSA 3330-1] activemq security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3330-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 07, 2015 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3330-1 (activemq - security update)

It was discovered that the Apache ActiveMQ message broker is susceptible to denial of service through an undocumented, remote shutdown command. OpenVAS Vulnerability Test $Id: deb3330.nasl 7798 2017-11-17 05:43:16Z teissa $ Auto-generated from advisory DSA 3330-1 using nvtgen 1.0 Script version:...

DSA-3330-1 activemq - security update

Bulletin has no description...

Oracle Database Client System Analyzer Arbitrary File Upload Code Execution - Ver2 (CVE-2010-3600)

A code execution vulnerability has been reported in Oracle Enterprise Manager Grid Control and Oracle Database Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Important: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.1.0 security and bug fix update

Red Hat JBoss Fuse and A-MQ 6.1.0 Patch 3 on Rollup Patch 1 R1P3, which fixes two security issues and one bug, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base score...

F5 Networks BIG-IP : SSH vulnerability (K13600)

A platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using secure shell SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect. The following platforms a...

Oracle Database Client System Analyzer Arbitrary File Upload

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

CVE-2013-3600

The CVE-2013-3600 issue affects Coursemill Learning Management System (LMS) 6.6. Affected component: the userid parameter used in certain functions (e.g., via Edit Profile); root cause is external control of an assumed-immutable web parameter, enabling privilege escalation when authenticated as a...

CVE-2013-3441

Cisco Aironet 3600 access points allow remote attackers to cause a denial of service memory corruption and device crash by disrupting Cisco Wireless LAN Controller communication and consequently forcing many transitions from FlexConnect mode to Standalone mode, aka Bug ID CSCuh71210...

Memory corruption

Cisco Aironet 3600 access points allow remote attackers to cause a denial of service memory corruption and device crash by disrupting Cisco Wireless LAN Controller communication and consequently forcing many transitions from FlexConnect mode to Standalone mode, aka Bug ID CSCuh71210...

Cisco Aironet 3600 Series Access Point Denial of Service Vulnerability

A vulnerability in the Cisco Aironet 3600 Series Access Point could allow an unauthenticated, remote attacker to trigger a denial of service condition. The vulnerability is due to a memory corruption condition that could occur when the device switches between FlexConnect and Standalone mode. An...

CVE-2013-3441

Cisco Aironet 3600 access points allow remote attackers to cause a denial of service memory corruption and device crash by disrupting Cisco Wireless LAN Controller communication and consequently forcing many transitions from FlexConnect mode to Standalone mode, aka Bug ID CSCuh71210...

CVE-2013-3441

Cisco Aironet 3600 Series Access Points are affected by CVE-2013-3441. The issue is a memory corruption vulnerability triggered when switching between FlexConnect and Standalone modes, caused by disrupted communication between configured FlexConnect APs and the Wireless LAN Controller. Exploitati...

CVE-2010-3600

creationtimestamp| type| source ---|---|--- 2012-11-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22714 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/oracle/clientsystemanalyzerupload.rb 2025-02-06...

Oracle Database Client System Analyzer Arbitrary File Upload

This Metasploit module exploits an arbitrary file upload vulnerability on the Client Analyzer component as included in Oracle Database 11g, which allows remote attackers to upload and execute arbitrary code. This Metasploit module has been tested successfully on Oracle Database 11g 11.2.0.1.0 on...

Oracle Database Client System Analyzer - Arbitrary File Upload (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 /Oracle Containers for J2EE/ include...

CVE-2012-3600

CVE-2012-3600 is a WebKit vulnerability affecting Apple Safari prior to 6.0. The issue allows a remote attacker to trigger memory corruption in WebKit via a crafted website, potentially enabling arbitrary code execution or a denial of service (application crash). The description in the Initial do...

CVE-2010-3600

CVE-2010-3600 describes an arbitrary file upload/code execution vulnerability in Oracle Database Client System Analyzer (CSA) used by Oracle Database Server 11.1.0.7/11.2.0.1 and Enterprise Manager Grid Control 10.2.0.5. Public details indicate a vulnerable JSP that accepts XML uploads with NULL ...

CVE-2009-3600

CVE-2009-3600 affects HUBScript 1.0. The vulnerability is an information-disclosure in the web management path: a direct request to manage/phpinfo.php causes phpinfo() to reveal configuration details. The root cause is exposing PHP configuration via phpinfo() without proper access controls. Impac...

CVE-2008-3600

Directory traversal vulnerability in contrib/phpBB2/modules.php in Gallery 1.5.7 and 1.6-alpha3, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the phpEx parameter within a modload action...