58 matches found
Mageia: Security Advisory (MGASA-2016-0116)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-5795
CVE-2015-5795 affects WebKit as used in Apple iOS before 9 and iTunes before 12.3. A crafted web site can cause remote code execution or a denial of service via memory corruption and application crash. The description notes this is a different vulnerability than other WebKit CVEs listed in Apple ...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-5795. Reason: This candidate is a duplicate of CVE-2013-5795. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2013-5795 instead of this candidate. All references and descriptions in this...
CVE-2013-5795
creationtimestamp| type| source ---|---|--- 2014-03-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31995 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/oracledemantradatabasecredentialsleak.rb 2025-02-0...
Oracle Demantra Database Credentials Leak
This module exploits a database credentials leak found in Oracle Demantra 12.2.1 in combination with an authentication bypass. This way an unauthenticated user can retrieve the database name, username and password on any vulnerable machine. Module Options msf use...
CVE-2013-5795
Oracle Demantra has a backend Database Credentials Leak vulnerability (CVE-2013-5795) affecting Demantra Demand Management within Oracle Supply Chain Products Suite (versions including 12.2.1, 12.2.2, 12.2.3 and related 7.x/SQL-Server lines). The issue enables an attacker to retrieve database ins...
CVE-2012-5795
The CVE-2012-5795 issue concerns the PayPal Express module in osCommerce failing to verify that the server hostname matches a domain name in the certificate’s CN or SAN. This enables MITM-style spoofing of SSL servers using an arbitrary valid certificate. Affected component: PayPal Express integr...
Mandriva Update for emacs MDVSA-2008:034 (emacs)
Check for the Version of emacs OpenVAS Vulnerability Test Mandriva Update for emacs MDVSA-2008:034 emacs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for emacs FEDORA-2007-3056
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for emacs FEDORA-2007-2946
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2008-5795
CVE-2008-5795 concerns the TYPO3 extension eluna_pagecomments (versions 1.1.2 and earlier) with a Cross‑Site Scripting (XSS) vulnerability. The connected documents describe that remote attackers can inject arbitrary web script or HTML via unspecified vectors. The root cause and affected software ...
Gentoo Security Advisory GLSA 200712-03 (emacs)
The remote host is missing updates announced in advisory GLSA 200712-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200712-03 (emacs)
The remote host is missing updates announced in advisory GLSA 200712-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
GLSA-200712-03 : GNU Emacs: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200712-03 GNU Emacs: Multiple vulnerabilities Drake Wilson reported that the hack-local-variables function in GNU Emacs 22 does not properly match assignments of local variables in a file against a list of unsafe or risky variable...
openSUSE 10 Security Update : emacs (emacs-4620)
The setting ':safe' of 'enable-local-variables' could be bypassed by specially crafted files CVE-2007-5795. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update emacs-4620. The text description of...
CVE-2007-5795
The CVE-2007-5795 issue affects Emacs 22 prior to 22.2 where the hack-local-variables handling, when enable-local-variables is set to :safe, fails to properly search unsafe variable lists. This can allow a user-assisted attacker to modify critical program variables via a Local variables declarati...