CVE-2017-5631

An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter i.e., "usr" that is transmitted in the login.php query string...

CVE-2017-5631

KMCIS CaseAware is affected by a reflected cross-site scripting (XSS) vulnerability in the login.php endpoint. The issue stems from insufficient sanitization of the user parameter (usr) in the login.php query string, enabling injection of malicious scripts into pages viewed by users. Impact per s...

SOL47605350 - MySQL vulnerability CVE-2016-5631

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

CVE-2016-5631

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Memcached...

CVE-2016-5631

Affected software: Oracle MySQL 5.7.13 and earlier. Vulnerable component: Server: Memcached. Description: Unspecified vulnerability allows remote administrators to affect availability. Impact: Partial availability impact. Root cause and remediation are not specified in the provided documents.

MySQL 5.7.x < 5.7.14 Multiple Vulnerabilities

The version of MySQL running on the remote host is 5.7.x prior to 5.7.14. It is, therefore, affected by multiple vulnerabilities : - Multiple unspecified flaws exist in the InnoDB subcomponent that allow an authenticated, remote attacker to cause a denial of service condition. CVE-2016-3495,...

MySQL 5.7.x < 5.7.14 Multiple Vulnerabilities

The version of MySQL running on the remote host is 5.7.x prior to 5.7.14. It is, therefore, affected by multiple vulnerabilities : - Multiple unspecified flaws exist in the InnoDB subcomponent that allow an authenticated, remote attacker to cause a denial of service condition. CVE-2016-3495,...

CVE-2015-5631

The CVE-2015-5631 issue affects Canon PIXMA MG7500 Series printers and specifically the Remote UI. The vulnerability is a Cross‑Site Request Forgery (CSRF) that lets remote attackers hijack administrator sessions when a user views a malicious page while logged into the Remote UI, enabling uninten...

CVE-2015-5631

Cross-site request forgery CSRF vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authentication of administrators...

CVE-2014-5631

CVE-2014-5631 affects the Video Poker Casino Android app (com.geaxgame.videopoker) 1.0.5, where the app does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnera...

Symantec PCAnywhere32 8.0 - Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/288/info Servers running PCAnywhere32 with TCP/IP networking are subject to a Denial of Service attack that will hang the server at 100% CPU utilization. A malicious user may initiate this DoS by connecting to tcp port 56...

CVE-2013-5631

CVE-2013-5631 entry is marked as rejected and not used.

CVE-2013-5631

...

Oracle Linux 6 : ipa (ELSA-2013-0528)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0528 advisory. - Fix typo in patch 0048 for CVE-2012-5484 878220 - Compliant client side session cookie behavior. CVE-2012-5631. 886371 - Use secure method to retrieve IPA CA...

Fedora 18 : freeipa-3.1.0-1.fc18 (2012-20123)

Update to upstream 3.1.0. Addresses CVE-2012-5631, improper cookie handling. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Symantec pcAnywhere 'awhost32' RCE Vulnerability

Symantec pcAnywhere is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symantec pcAnywhere Remote Code Execution

======= Summary ======= Name: Symantec pcAnywhere Remote Code Execution Preauth Release Date: 30 April 2012 Reference: NGS00118 Discoverer: Edward Torkington Vendor: Symantec Vendor Reference: Systems Affected: Symantec pcAnywhere 12.5.x IT Management Suite 7.0 pcAnywhere Solution 12.5.x IT...

NGS00118 Technical Advisory: Symantec pcAnywhere Remote Code Execution as SYSTEM

======= Summary ======= Name: Symantec pcAnywhere Remote Code Execution Preauth Release Date: 30 April 2012 Reference: NGS00118 Discoverer: Edward Torkington [email protected] Vendor: Symantec Vendor Reference: Systems Affected: Symantec pcAnywhere 12.5.x IT Management Suite 7.0...

Code injection

The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, Altiris Client Management Suite pcAnywhere Solution 7.0 aka 12.5.x and 7.1 aka 12.6.x, and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 aka...

Symantec pcAnywhere Client/Server输入处理拒绝服务漏洞

BUGTRAQ ID: 51965 CVE ID: CVE-2012-0291 Symantec PCAnywhere是全球最畅销的用于管理服务器和提供管理人员支持的远程控制解决方案。 pcAnywhere客户端或服务器在处理某些意外输入时存在安全漏洞，TCP 5631上的 Symantec pcAnywhere主机服务在登录和身份验证的外部数据的验证和过滤上出现错误，可造成应用不稳定或崩溃。 0 Symantec pcAnywhere 12.x Symantec pcAnywhere 11.x 厂商补丁： Symantec --------...