CVE-2013-0682

Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 do not properly handle exceptions, which allows remote attackers to cause a denial of service application crash or possibly execute...

CVE-2013-0681

CVE-2013-0681 affects Cogent Real-Time Systems products (Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub Windows before 6.4.22, DataHub QuickTrend before 7.3.0). The issue is a NULL pointer dereference in the parser when handling malformed data in a formatted text command ...

PT-2013-2528

Name of the Vulnerable Software and Affected Versions Cogent DataHub versions prior to 7.3.0 OPC DataHub versions prior to 6.4.22 Cascade DataHub versions prior to 6.4.22 DataHub QuickTrend versions prior to 7.3.0 Description The issue allows remote servers to cause a denial of service, resulting...

PT-2013-2525

Name of the Vulnerable Software and Affected Versions Cogent DataHub versions prior to 7.3.0 OPC DataHub versions prior to 6.4.22 Cascade DataHub versions prior to 6.4.22 DataHub QuickTrend versions prior to 7.3.0 Description A stack-based buffer overflow issue in the web server component allows...

CVE-2013-0681: Improper Input Validation

Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote attackers to cause a denial of service NULL pointer dereference and application crash via malformed data in a formatted text...

CVE-2013-0680: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the web server in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allows remote attackers to cause a denial of service daemon crash or possibly execute...

CVE-2013-0682: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 do not properly handle exceptions, which allows remote attackers to cause a denial of service application crash or possibly execute...

Cogent OPC DataHub and Cascade DataHub XSS and CRLF Vulnerabilities

This host is installed with OPC DataHub or Cascade DataHub and is prone to cross site scripting and CRLF vulnerabilities. OpenVAS Vulnerability Test $Id: gbcogentcascadenopcdatahubmultvuln.nasl 6022 2017-04-25 12:51:04Z teissa $ Cogent OPC DataHub and Cascade DataHub XSS and CRLF Vulnerabilities...

Cogent OPC DataHub and Cascade DataHub < 7.2 XSS and CRLF Vulnerabilities

OPC DataHub or Cascade DataHub is prone to multiple cross-site scripting XSS and CRLF vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2012-0309

Cross-site scripting XSS vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-2485

Name of the Vulnerable Software and Affected Versions Cogent DataHub versions 7.1.2 and earlier Cascade DataHub versions 6.4.20 and earlier OPC DataHub versions 6.4.20 and earlier Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject...

CVE-2012-0310: Improper Control of Generation of Code

CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2012-0309: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-2486

Name of the Vulnerable Software and Affected Versions Cogent DataHub versions 7.1.2 and earlier Cascade DataHub versions 6.4.20 and earlier OPC DataHub versions 6.4.20 and earlier Description The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting...

UBUNTU-CVE-2009-1960

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the configcascademaindefault parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp://...

DEBIAN-CVE-2009-1960

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the configcascademaindefault parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp://...

Dokuwiki 2009-02-14 Local File Inclusion

Author girex Homepage girex.altervista.org CMS Dokuwiki Homepage dokuwiki.org Affected versions 2009-02-14 rc2009-02-06 rc2009-01-30 Bug Local file inclusion Need registerglobals = On Vuln description File: /inc/init.php // if available load a preload config file $preload =...

Dokuwiki 2009-02-14 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================== Dokuwiki 2009-02-14 Local File Inclusion Vulnerability ====================================================== Author girex CMS Dokuwiki Homepage dokuwiki.org Affected versions 2009-02-...

Dokuwiki 2009-02-14 - Local File Inclusion

Dokuwiki 2009-02-14 - Local File Inclusion Author girex Homepage girex.altervista.org CMS Dokuwiki Homepage dokuwiki.org Affected versions 2009-02-14 rc2009-02-06 rc2009-01-30 Bug Local file inclusion Need registerglobals = On Vuln description File: /inc/init.php // if available load a preload...

CVE-2009-1088

The CVE-2009-1088 entry concerns Hannon Hill Cascade Server 5.7 and other versions where remote authenticated users can trigger arbitrary code execution through a crafted XSLT stylesheet using extension elements/functions to invoke Xalan-Java (e.g., xalan://java.lang.Runtime). This is a remote co...