CVE-2016-3979

CVE-2016-3979 (SAP NetWeaver AS JAVA ICM/ICM) : A denial-of-service vulnerability in the Internet Communication Manager (ICMAN/ICM) component affects SAP NetWeaver AS JAVA 7.2–7.4. According to connected sources, a remote attacker can cause a heap memory corruption and process crash by sending a ...

CVE-2015-3979

The CVE-2015-3979 entry concerns SAP CRM’s Business Rules Framework (CRM-BF-BRF) in SAP CRM. A connected CNVD record notes a concrete vulnerability where input submitted by users is not properly filtered, allowing remote attackers to exploit it by sending specially crafted requests to execute arb...

SAP JAVA AS icman - DoS vulnerability

Application: SAP JAVA AS Versions Affected: SAP JAVA AS 7.2 – 7.4 Vendor URL: SAP Bugs: Denial of Service Reported: 04.12.2015 Vendor response: 05.12.2015 Date of Public Advisory: 14.03.2016 Reference: SAP Security Note 2256185 Author: Dmitry Yudin ERPScan @ret5et Vulnerability Information Class:...

CVE-2013-3979

CVE-2013-3979: Multiple XSS vulnerabilities in the Web Client’s help pages (Web\Content\Help) of IBM Cognos Command Center (Star Command Center/Star Analytics) prior to version 10.1, triggered when using Internet Explorer. Exploitation is via unspecified vectors by remote authenticated users; imp...

CVE-2013-3979: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the help pages in Web\Content\Help\ in the Web Client in IBM Cognos Command Center aka Star Command Center or Star Analytics before 10.1, when Internet Explorer is used, allow remote authenticated users to inject arbitrary web script or HTML vi...

Oracle Linux 3 / 4 : seamonkey (ELSA-2009-1673)

From Red Hat Security Advisory 2009:1673 : Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

Mozilla Firefox __android_log_print()远程代码执行漏洞

BUGTRAQ ID: 55344 CVE ID: CVE-2012-3979 Firefox是一款非常流行的开源WEB浏览器。 Mozilla Firefox for Android 15.0之前版本没有正确调用函数androidlogprint，在实现上存在远程代码执行漏洞，通过调用JavaScript转储函数的特制网页，攻击者可利用此漏洞在受影响应用中执行任意代码。 0 Mozilla Firefox 15.0 厂商补丁： Mozilla ------- Mozilla已经为此发布了一个安全公告（mfsa2012-71）以及相应补丁: mfsa2012-71：Insecure us...

CVE-2012-3979

Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the androidlogprint function, which allows remote attackers to execute arbitrary code via a crafted web page that calls the JavaScript dump function...

CVE-2012-3979

CVE-2012-3979 : The OpenVAS/Nessus entries indicate a vulnerability in Mozilla Firefox for Android where insecure use of __android_log_print can be triggered by a crafted web page using the dump() function, potentially allowing remote code execution. The issue is tied to Firefox for Android speci...

CVE-2012-3979

Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the androidlogprint function, which allows remote attackers to execute arbitrary code via a crafted web page that calls the JavaScript dump function...

CVE-2011-3979

Cross-site scripting XSS vulnerability in ztemp/viewcompiled/Theme/themeadminsetasdefault.php in the theme module in Zikula Application Framework 1.3.0 build 3168, 1.2.7, and probably other versions allows remote attackers to inject arbitrary web script or HTML via the themename parameter in the...

CVE-2011-3979

Vulnerability: Zikula Application Framework (theme module) has an XSS in ztemp/view_compiled/Theme/theme_admin_setasdefault.php. Affected versions include 1.3.0 build 3168 and 1.2.7 (likely others). Impact: remote attackers can inject arbitrary HTML/Script via the themename parameter in the setos...

CVE-2011-3979

creationtimestamp| type| source ---|---|--- 2011-09-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36121...

CentOS Update for firefox CESA-2009:1674 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-3979

Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 generates different error messages depending on whether the Login field corresponds to a valid username, which allows remote attackers to enumerate account names via a login SOAPAction to the dswsbobje/services/session URI...

CVE-2010-3979

Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 generates different error messages depending on whether the Login field corresponds to a valid username, which allows remote attackers to enumerate account names via a login SOAPAction to the dswsbobje/services/session URI...

CVE-2010-3979

SAP BusinessObjects Enterprise XI 3.2 is affected by CVE-2010-3979 through the dswsbobje component. The vulnerability arises because the login field error messaging varies depending on whether the provided credential matches a valid username, enabling remote attackers to enumerate valid account n...

thunderbird security update

CentOS Errata and Security Advisory CESA-2010:0154 An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CV...

SuSE 11.2 Security Update: MozillaThunderbird (2010-03-05)

Mozilla Thunderbird was upgraded to version 3.0.3, fixing various bugs and security issues. Following security issues have been fixed: MFSA 2010-01 / CVE-2010-0159: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based product...

Ubuntu Update for firefox-3.0, xulrunner-1.9 regression USN-877-1

Ubuntu Update for Linux kernel vulnerabilities USN-877-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8771.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for firefox-3.0, xulrunner-1.9 regression USN-877-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...