53 matches found
CVE-2016-5744
CVE-2016-5744 affects Siemens SIMATIC WinCC (and WinCC Runtime Professional) via improper input validation, allowing remote, unauthenticated attackers to extract arbitrary files from WinCC stations. Affected: WinCC V7.0 SP2, WinCC V7.0 SP3, and WinCC V7.2 (WinCC Runtime Professional and related c...
CVE-2014-5744
The CVE-2014-5744 entry concerns the Android app RE-VOLT 2 : MULTIPLAYER (com.wegoi.revolt2multiplayer) version 1.1.4, where the app does not verify X.509 certificates from SSL servers. This weakness can allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a cra...
CVE-2013-5744
CVE-2013-5744 affects Feng Office (2.3.2-rc and earlier). The issue is a Cross-Site Scripting (XSS) in the ref_[any] parameter passed to /index.php (e.g., ref_abc), caused by insufficient sanitisation of user-supplied data. Exploitation can lead to arbitrary HTML/JavaScript execution in the victi...
Cross-Site Scripting (XSS) in Feng Office
Advisory ID: HTB23174 Product: Feng Office Vendor: Secure Data SRL Vulnerable Versions: 2.3.2-rc and probably prior Tested Version: 2.3.2-rc Advisory Publication: September 18, 2013 without technical details Vendor Notification: September 18, 2013 Public Disclosure: October 9, 2013 Vulnerability...
Feng Office 2.3.2-rc Cross Site Scripting Vulnerability
Feng Office version 2.3.2-rc suffers from a cross site scripting vulnerability. Advisory ID: HTB23174 Product: Feng Office Vendor: Secure Data SRL Vulnerable Versions: 2.3.2-rc and probably prior Tested Version: 2.3.2-rc Advisory Publication: September 18, 2013 without technical details Vendor...
Feng Office 2.3.2-rc Cross Site Scripting
Advisory ID: HTB23174 Product: Feng Office Vendor: Secure Data SRL Vulnerable Versions: 2.3.2-rc and probably prior Tested Version: 2.3.2-rc Advisory Publication: September 18, 2013 without technical details Vendor Notification: September 18, 2013 Public Disclosure: October 9, 2013 Vulnerability...
CVE-2012-5744
The CVE-2012-5744 issue concerns multiple XSS vulnerabilities in the Cisco Identity Services Engine (ISE) guest portal. Connected sources specify that the flaw stems from improper input validation in the guest portal, enabling an unauthenticated or remote attacker to lure a user to a link and cau...
Debian DSA-1699-1 : zaptel - array index error
An array index error in zaptel, a set of drivers for telephony hardware, could allow users to crash the system or escalate their privileges by overwriting kernel memory CVE-2008-5396 . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
[SECURITY] [DSA 1699-1] New zaptel packages fix privilege escalation
------------------------------------------------------------------------ Debian Security Advisory DSA-1699-1 [email protected] http://www.debian.org/security/ Florian Weimer January 11, 2009 http://www.debian.org/security/faq -...
CVE-2008-5744
CVE-2008-5744 describes an array index error in the zaptel/DAHDI driver (dahdi/tor2.c) that allows local users in the dialout group to overwrite kernel memory by writing to /dev/zap/ctl. Affected: Zaptel/DAHDI versions up to 1.4.11 (and related patches). The root cause relates to an incorrect tor...
CVE-2006-5744
Multiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to execute arbitrary SQL commands via an Access Point with a crafted SSID, and via unspecified vectors related to a malicious system operator...
CVE-2006-5744
The CVE-2006-5744 entry concerns Highwall Enterprise and Highwall Endpoint, version 4.0.2.11045, with the management interface vulnerable to multiple SQL injection flaws. The root cause is the inability to properly validate inputs in the management interface, enabling remote attackers to execute ...
