CVE-2016-3973

Affected software: SAP NetWeaver AS Java RTC chat feature (WD_CHAT) in RTC 7.3–7.4 (likely 7.1–7.5). Root cause / vulnerability: Information disclosure via a crafted HTTP interaction with the chat UI; an anonymous attacker can access user information by navigating to webdynpro/resources/sap.com/t...

CVE-2015-3973

CVE-2015-3973 affects Janitza UMG power quality devices (UMG 508, 509, 511, 604, 605). The root cause is improper session token generation, where session tokens derive from the 4‑digit PIN plus a server‑generated challenge, enabling an attacker to potentially determine the PIN from session tokens...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2012:1064-1)

Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update bnc777588 - MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards - MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-20 12-1975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/ CVE-2012-3959...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2012:1065-1)

Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update bnc777588 - MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards - MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-20 12-1975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/ CVE-2012-3959...

CVE-2014-3973

FrontAccounting (FA) before 2.3.21 is affected by multiple SQL injection vulnerabilities. The root cause is unspecified vectors allowing remote attackers to execute arbitrary SQL commands, with impact limited to partial confidentiality/integrity/availability per the CVE data. Remediation requires...

CVE-2013-3973

SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-3973

CVE-2013-3973 is an SQL injection vulnerability affecting IBM Maximo Asset Management and related Maximo offerings. IBM’s Security Bulletin 08A29F46834AFA86A6AA4DC93AF4EFD8AE25757E46E0D8369F58AB4F578B9B87 lists affected products (Maximo Asset Management, Maximo Asset Management Essentials, Maximo...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2012:1065-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE Update for MozillaFirefox openSUSE-SU-2012:1064-1 (MozillaFirefox)

Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse201210641.nasl 8285 2018-01-04 06:29:16Z teissa $ SuSE Update for MozillaFirefox openSUSE-SU-2012:1064-1 MozillaFirefox Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

MozillaFirefox: Update to version 15 (critical)

Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update bnc777588 MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1 975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE- 2012-3959...

Mozilla Firefox Multiple Vulnerabilities - August12 (Windows)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxmultvulnaug12win.nasl 5958 2017-04-17 09:02:19Z teissa $ Mozilla Firefox Multiple Vulnerabilities - August12 Windows Authors: Rachana Shetty Copyright: Copyright c...

CVE-2012-3973

CVE-2012-3973 affects Mozilla Firefox before 15.0, where the debugger in the developer-tools subsystem fails to properly restrict access to the remote-debugging service when remote debugging is disabled. This allows remote attackers to execute arbitrary code by leveraging the HTTPMonitor extensio...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2012:075)

Multiple vulnerabilities has been found and corrected in ffmpeg : The Matroska format decoder in FFmpeg does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file CVE-2011-3362, CVE-2011-3504. cavsdec.c in libavcodec in FFmpeg allows remote...

DEBIAN-CVE-2011-3973

cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service incorrect write operation and application crash via an invalid bitstream in a Chinese AVS video aka CAVS file, related to the decoderesidualblock, checkforslice, and...

CVE-2011-3973

cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service incorrect write operation and application crash via an invalid bitstream in a Chinese AVS video aka CAVS file, related to the decoderesidualblock, checkforslice, and...

CVE-2011-3973

cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service incorrect write operation and application crash via an invalid bitstream in a Chinese AVS video aka CAVS file, related to the decoderesidualblock, checkforslice, and...

CVE-2011-3973

FFmpeg CVE-2011-3973 affects cavsdec.c in libavcodec and can cause a denial of service via an invalid bitstream in AVS (CAVS) files, related to decode_residual_block, check_for_slice, and cavs_decode_frame. The issue is reported for FFmpeg releases prior to 0.7.4 and 0.8.x before 0.8.3. Remediati...

CVE-2011-3973

cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service incorrect write operation and application crash via an invalid bitstream in a Chinese AVS video aka CAVS file, related to the decoderesidualblock, checkforslice, and...

Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability (2508272)

This host is missing a critical security update according to Microsoft Bulletin MS11-027. OpenVAS Vulnerability Test $Id: secpodms11-027.nasl 8724 2018-02-08 15:02:56Z cfischer $ Microsoft IE Developer Tools WMITools and Windows Messenger ActiveX Control Vulnerability 2508272 Authors: Veerendra G...

Microsoft WMI Administrative Tools ActiveX Control Remote Code Execution Vulnerabilities

This host is installed with Microsoft WMI Administrative Tools and is prone to multiple remote code execution vulnerabilities. This NVT has been replaced by NVT secpodms11-027.nasl OID:1.3.6.1.4.1.25623.1.0.900281. OpenVAS Vulnerability Test $Id: gbmswmiadmintoolsactivexcodeexecvuln.nasl 5364...