71 matches found
CVE-2017-4687
CVE-2017-4687 entry is rejected/not used; does not represent an active vulnerability.
CVE-2015-4687
CVE-2015-4687 corresponds to a Cross-Site Scripting (XSS) vulnerability in Ellucian Banner Student (formerly SunGard) version 8.5.1.2. The linked sources confirm an XSS flaw that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available records do ...
CVE-2016-4687
CVE-2016-4687 entry is rejected/not used per initial description; does not represent an active vulnerability.
CVE-2014-4687
pfSense is affected by CVE-2014-4687: multiple XSS vulnerabilities in pfSense before 2.1.4. Exploitable via five vectors: (1) starttime0 parameter in firewall_schedule.php, (2) rssfeed parameter in rss.widget.php, (3) servicestatusfilter parameter in services_status.widget.php, (4) txtRecallBuffe...
openSUSE Security Update : opera (openSUSE-2011-76)
Opera version update to 11.60 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-76. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc';...
openSUSE Security Update : opera (openSUSE-SU-2011:1314-1)
opera was updated to version 11.60 to fix several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-5529. The text description of this plugin is C SUSE LLC...
openSUSE Security Update : opera (openSUSE-SU-2011:1314-1)
opera was updated to version 11.60 to fix several security issues %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-5529. The text description of this plugin is C SUSE LLC...
Juniper Junos SRX Series TCP ALG DoS (JSA10577)
According to its self-reported version number, the remote Junos device has a denial of service vulnerability. SRX Series devices with TCP-based Application Layer Gateways ALGs can crash when receiving specially crafted TCP packets. A remote, unauthenticated attacker could exploit this to crash th...
CVE-2012-4687
The CVE-2012-4687 issue affects the Post Oak AWAM Bluetooth Reader Traffic System, where the authentication/host key generation uses insufficient entropy. This weakness enables potential remote MitM attacks by predicting private keys, potentially compromising confidentiality and integrity. Affect...
Post Oak Bluetooth Traffic Systems Insufficient Entropy Vulnerability
Overview This advisory provides mitigation details for a vulnerability that impacts Post Oak Traffic AWAM Bluetooth Reader Systems. An independent research group composed of Nadia Heninger University of California at San Diego, J. Alex Halderman, Zakir Durumeric, and Eric Wustrow all from the...
Opera Multiple Vulnerabilities - December11 (Mac OS X)
The host is installed with Opera and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulndec11macosx.nasl 7029 2017-08-31 11:51:40Z teissa $ Opera Multiple Vulnerabilities - December11 Mac OS X Authors: Rachana Shetty Copyright: Copyright c 2011 Greenbone Networks...
CVE-2011-4687
CVE-2011-4687 affects Opera before 11.60. The issue is a remote denial-of-service vulnerability caused by processing unspecified content on a web page (demonstrated via a Cisco homepage page), leading to CPU and memory consumption. Public documents identify Opera 11.60 as the fixed version; OpenV...
CVE-2010-4687
CVE-2010-4687 affects Cisco STCAPP (the SCCP telephony control application) on Cisco IOS before 15.0(1)XA1. The issue is that it does not properly handle multiple calls on a shared line, allowing remote attackers to cause a denial of service (port hang) by ending two calls simultaneously that are...
CVE-2009-4687
CVE-2009-4687 documents a SQL injection in silentum_guestbook.php of Silentum Guestbook 2.0.2, allowing remote attackers to execute arbitrary SQL commands via the messageid parameter. The vulnerability affects the Silentum Guestbook component and is reflected in multiple records (e.g., NVD entry ...
CVE-2009-4687
creationtimestamp| type| source ---|---|--- 2009-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9202...
FreeBSD Ports: mantis
The remote host is missing an update to the system as announced in the referenced advisory. VID af2745c0-c3e0-11dd-a721-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID af2745c0-c3e0-11dd-a721-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: mantis
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
GLSA-200812-07 : Mantis: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200812-07 Mantis: Multiple vulnerabilities Multiple issues have been reported in Mantis: EgiX reported that manageprojpage.php does not correctly sanitize the sort parameter before passing it to createfunction in core/utilityapi.p...
CVE-2008-4687
manageprojpage.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP sequences, which are processed by createfunction within the multisort function in core/utilityapi.php...