CVE-2014-3693

CVE-2014-3693 affects LibreOffice Impress Remote in LibreOffice 4.x, where a use-after-free in the socket manager allows a remote attacker to crash the process or potentially execute arbitrary code via a crafted request to TCP port 1599. The issue affects LibreOffice 4.x before 4.2.7 and 4.3.x be...

CVE-2014-3693

Use-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4.2.7 and 4.3.x before 4.3.3 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted request to TCP port 1599...

[BSA-099] Security update for libreofice

Rene Engelhard uploaded new packages for libreoffice which fixed the following security problems: CVE-2014-3693: Use-After-Free in socket manager of Impress Remote It was discovered that LibreOffice 4.0.0 and later does not manage the port 1599 for the LibreOffice Impress correctly. An external...

[BSA-099] Security update for libreofice

Rene Engelhard uploaded new packages for libreoffice which fixed the following security problems: CVE-2014-3693: Use-After-Free in socket manager of Impress Remote It was discovered that LibreOffice 4.0.0 and later does not manage the port 1599 for the LibreOffice Impress correctly. An external...

Persits XUpload ActiveX MakeHttpRequest Directory Traversal

No description provided by source. $Id: persitsxuploadtraversal.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

CVE-2013-3693

The CVE-2013-3693 issue affects BlackBerry Enterprise Service (BES) 10.0–10.1.2, where the Universal Device Service (UDS) fails to restrict access to the JBoss RMI interface on port 1098, allowing a remote attacker in an adjacent network to upload and execute arbitrary packages. Remediation: upda...

CVE-2012-3693

CVE-2012-3693 affects WebKit in Safari (iOS/macOS) where IDN/Unicode font look‑alike characters could render a spoofed URL in the address bar, enabling phishing-like deception. Impact is spoofing risk rather than code execution; Apple’s update to Safari 6.0 (and iOS 6) addresses the issue by upda...

CVE-2011-3693

NetSaro Enterprise Messenger Server 2.0 allows local users to discover cleartext server credentials by reading the NetSaro.fdb file...

CVE-2011-3693

CVE-2011-3693 affects NetSaro Enterprise Messenger Server 2.0. The vulnerability arises because credentials are stored in the NetSaro.fdb file, which local users can read, leading to cleartext server credentials exposure. The impact is partial confidentiality loss on a local basis; attack vector ...

CVE-2010-3693

Cross-site scripting XSS vulnerability in Horde Dynamic IMP DIMP before 1.1.5, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via vectors related to displaying mailbox names...

CVE-2010-3693

Cross-site scripting XSS vulnerability in Horde Dynamic IMP DIMP before 1.1.5, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via vectors related to displaying mailbox names...

CVE-2010-3693

CVE-2010-3693 is an XSS vulnerability in Horde Dynamic IMP (DIMP) before 1.1.5 and Horde Groupware Webmail Edition before 1.2.7. It allows remote attackers to inject arbitrary web script or HTML via vectors related to displaying mailbox names. The documents do not specify exploitation status or c...

Persits XUpload ActiveX MakeHttpRequest Directory Traversal

$Id: persitsxuploadtraversal.rb 7760 2009-12-08 21:24:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

HP LoadRunner XUpload ActiveX control MakeHttpRequest file download

Added: 10/21/2009 CVE: CVE-2009-3693 BID: 36550 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the XUpload.ocx ActiveX control for performing file exchanges. Problem The MakeHttpRequest method in the XUpload.ocx ActiveX control can be used to download...

HP LoadRunner XUpload ActiveX control MakeHttpRequest file download

Added: 10/21/2009 CVE: CVE-2009-3693 BID: 36550 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the XUpload.ocx ActiveX control for performing file exchanges. Problem The MakeHttpRequest method in the XUpload.ocx ActiveX control can be used to download...

HP LoadRunner XUpload ActiveX control MakeHttpRequest file download

Added: 10/21/2009 CVE: CVE-2009-3693 BID: 36550 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the XUpload.ocx ActiveX control for performing file exchanges. Problem The MakeHttpRequest method in the XUpload.ocx ActiveX control can be used to download...

CVE-2009-3693

Directory traversal vulnerability in the Persits.XUpload.2 ActiveX control XUpload.ocx in HP LoadRunner 9.5 allows remote attackers to create arbitrary files via .. backwards slash dot dot sequences in the third argument to the MakeHttpRequest method...

CVE-2009-3693

CVE-2009-3693 involves a directory traversal in Persits.XUpload.2 ActiveX control (XUpload.ocx) shipped with HP LoadRunner 9.5. The flaw arises in the MakeHttpRequest method, where sequences like "..\" can cause arbitrary files to be created on the target. Public details describe this as a write-...

CVE-2009-3693

creationtimestamp| type| source ---|---|--- 2009-09-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9806 2010-11-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16598 2018-05-29 15:50:33+00:00| seen|...

VMSA-2008-0014 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information disclosure, privilege escalation and other security issues.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2008-0014 Synopsis: Updates to VMware Workstation, VMware Player, VMware ACE, VMware Server, VMware ESX address information...