513 matches found
CVE-2017-3881
CVE-2017-3881 is a Cisco IOS/IOS XE vulnerability in the Cluster Management Protocol (CMP) handling. Two factors enable exploitation: (1) CMP-specific Telnet options were not restricted to internal cluster communications and could be processed over any Telnet session; (2) malformed CMP-specific T...
harfbuzz: Use-of-uninitialized-value in OT::RangeRecord::cmp
Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=6595199411159040 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzermsanharfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
Oracle OIT ImageExport libvs_bmp BMP BI_RLE8 Width Code Execution Vulnerability
Talos Vulnerability Report TALOS-2016-0160 Oracle OIT ImageExport libvsbmp BMP BIRLE8 Width Code Execution Vulnerability July 19, 2016 Description A vulnerability in libvseshr can lead to remote code execution while parsing a specially crafted Word document containing a reference to Escher drawin...
CVE-2015-0521
Cross-site scripting XSS vulnerability in EMC RSA Certificate Manager RCM before 6.9 build 558 and RSA Registration Manager RRM before 6.9 build 558 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the CMP shared secret parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in EMC RSA Certificate Manager RCM before 6.9 build 558 and RSA Registration Manager RRM before 6.9 build 558 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the CMP shared secret parameter...
CVE-2015-0521
Cross-site scripting XSS vulnerability in EMC RSA Certificate Manager RCM before 6.9 build 558 and RSA Registration Manager RRM before 6.9 build 558 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the CMP shared secret parameter...
CVE-2015-0521
CVE-2015-0521 is a stored XSS vulnerability affecting EMC RSA Certificate Manager (RCM) and RSA Registration Manager (RRM) prior to 6.9 Build 558. The issue involves the CMP shared secret parameter and can be exploited by remote authenticated users to inject arbitrary HTML/script in a user’s brow...
PT-2015-4685
Name of the Vulnerable Software and Affected Versions EMC RSA Certificate Manager versions prior to 6.9 build 558 EMC RSA Registration Manager versions prior to 6.9 build 558 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via...
CVE-2015-0521: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in EMC RSA Certificate Manager RCM before 6.9 build 558 and RSA Registration Manager RRM before 6.9 build 558 allows remote authenticated users to inject arbitrary web script or HTML via vectors related to the CMP shared secret parameter...
PT-2015-1690
Name of the Vulnerable Software and Affected Versions OpenSSL versions 0.9.8 through 0.9.8zg OpenSSL versions 1.0.0 through 1.0.0s OpenSSL versions 1.0.1 through 1.0.1n OpenSSL versions 1.0.2 through 1.0.2b Description The issue is related to the X509 cmp time function, which does not properly...
Simple Certificate Enrollment Protocol (SCEP) does not strongly authenticate certificate requests
Overview Simple Certificate Enrollment Protocol SCEP does not strongly authenticate certificate requests made by users or devices. Update March 19, 2025: Solution section has been updated. Description IETF Internet-Draft draft-nourse-scep-23 "...defines a protocol, Simple Certificate Enrollment...
PT-2012-1155
Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.0j OpenSSL versions prior to 0.9.8y Description The issue affects the OpenSSL package in Gentoo Linux, potentially leading to breaches in confidentiality, integrity, and availability of protected information...
