211 matches found
Microsoft Windows OLE Remote Code Execution Vulnerability (2876217)
This host is missing a critical security update according to Microsoft Bulletin MS13-070. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
[SECURITY] [DSA 2550-2] asterisk regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-2550-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 26, 2012 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2550-1] asterisk security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2550-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 18, 2012 http://www.debian.org/security/faq -...
Fedora Update for asterisk FEDORA-2012-10324
Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2012-10324 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS (AST-2012-010)
According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a vulnerability that could allow a remote, authenticated attacker to exhaust the server of resources. If an endpoint sends a provisional response to the server's re-INVITE...
CVE-2012-3863
channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a...
CVE-2012-3863
channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a...
CVE-2012-3863
channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a...
CVE-2012-3863
CVE-2012-3863 affects Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2 (also in various packaged releases such as Certified Asterisk and Digiumphones) due to improper handling of a provisional SIP reINVITE response in channels/chan_sip.c. This can allow remote authenticated users...
CVE-2011-3863
creationtimestamp| type| source ---|---|--- 2011-09-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36191...
CVE-2011-3863
The CVE-2011-3863 entry pertains to the RedLine WordPress theme (versions prior to 1.66). The vulnerability is a Cross‑Site Scripting (XSS) flaw in the theme’s s parameter that allows remote attackers to inject arbitrary script or HTML. Publicly documented impact is XSS with no detail on exploita...
CVE-2010-3863
CVE-2010-3863 affects Apache Shiro (before 1.1.0) and JSecurity 0.9.x. The root cause is failure to canonicalize URI paths before comparing them to entries in the shiro.ini filter, allowing a remote attacker to bypass access restrictions with crafted requests such as GET /./account/index.jsp. The...
Apache Shiro Information Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 CVE-2010-3863: Apache Shiro information disclosure vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Shiro 1.0.0-incubating The unsupported JSecurity 0.9.x versions are also affected Description:...
CVE-2010-3863
creationtimestamp| type| source ---|---|--- 2010-11-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34952 2025-10-31 21:00:05+00:00| published-proof-of-concept| Telegram/ZslVGStVV3lt95-hFdoeilO4jVWtTXfLdOqUzc5CunctM...
CentOS 5 : enscript (CESA-2008:1016)
An updated enscript packages that fixes several security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. GNU enscript converts ASCII files to PostScriptR language files and spools the...
CVE-2009-3863
Summary: CVE-2009-3863 is a buffer overflow in the gxmim1.dll ActiveX control of Novell GroupWise Client 7.0.3.1294. An attacker can cause a remote denial of service (application crash) by sending a long argument to SetFontFace. The vulnerability is exploitable over the network with low attack co...
SLES10: Security update for enscript
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: enscript More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/ VID...
SLES10: Security update for enscript
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: enscript More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText: 2009...
SLES9: Security update for enscript
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: enscript For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5037640 within the Su...