20294 matches found
CVE-2012-4707
The CVE-2012-4707 issue affects the 3S CODESYS Gateway-Server up to version 2.3.9.27. It is described as an "Improper Restriction of Operations Within the Bounds of a Memory Buffer" vulnerability, where an out-of-bounds memory access could allow remote attackers to execute arbitrary code. Public ...
CVE-2012-6275
Summary: CVE-2012-6275 affects BigAntSoft BigAnt IM Message Server’s AntDS.exe, where a stack-based buffer overflow is triggered by handling the filename header in SCH requests or the userid field in DUPF requests. This can allow remote, unauthenticated attackers to influence the process, potenti...
CVE-2012-6273
CVE-2012-6273 : BigAntSoft BigAnt IM Message Server is affected by an SQL injection vulnerability where a search-user (SHU) request is constructed with insufficient sanitization, allowing remote execution of arbitrary SQL commands. The issue is consistently described across sources as an injectio...
CVE-2012-6273
SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL commands via an SHU aka search user request...
CVE-2012-6274
BigAnt Server (BigAnt IM Message Server) is affected by CVE-2012-6274: an authentication bypass that permits remote unauthenticated file uploads to AntServer\DocData\Public via DUPF processing, with a reported directory-traversal weakness contributing to arbitrary file upload. Connected advisorie...
CVE-2012-4708
The CVE-2012-4708 issue affects 3S CODESYS Gateway-Server (pre-2.3.9.27). The vulnerability is a stack-based buffer overflow triggered by a crafted packet sent to the Gateway Server (port 1211), allowing remote code execution and potentially full control of the affected system. Public details ind...
[SECURITY] [DSA 2631-1] squid3 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2630-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso February 24, 2013 http://www.debian.org/security/faq -...
DSquare Exploit Pack: D2SEC_GWCLS
Name| d2secgwcls ---|--- CVE| CVE-2012-0439 Exploit Pack| D2ExploitPack Description| Novell GroupWise gwcls1.dll ActiveX Remote Code Execution Vulnerability Notes|...
CVE-2012-0439
CVE-2012-0439 is an ActiveX remote-code-execution vulnerability in the Novell GroupWise Client gwcls1.dll. The issue affects GroupWise 8.x before 8.0.3 HP2 and 2012 before SP1 HP1, where an attacker can trigger arbitrary code execution via a pointer argument to the SetEngine method or an XPItem p...
Debian Security Advisory DSA 2631-1 (squid3 - denial of service)
Squid3, a fully featured Web proxy cache, is prone to a denial of service attack due to memory consumption caused by memory leaks in cachemgr.cgi: CVE-2012-5643 squid's cachemgr.cgi was vulnerable to excessive resource use. A remote attacker could exploit this flaw to perform a denial of service...
TeamSHATTER Security Advisory: Oracle EM Segment Advisor Arbitrary URL redirection/phishing (CVE-2012-3219)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory Oracle Enterprise Manager Segment Advisor Arbitrary URL redirection/phishing vulnerability February 20, 2013 Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 10.2.0.3, 10.2.0.4; 10.2.0.5,...
SuSE 11.2 Security Update : squid (SAT Patch Number 7335)
A denial of service problem in Squid via invalid Content-Length headers and memory leaks has been fixed. CVE-2012-5643 / CVE-2013-0189, SQUID-2012:1 Also a logrotate permission issue has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...
TeamSHATTER Security Advisory: SQL Injection in Oracle Alter FBA Table (CVE-2012-1751)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory SQL Injection in Oracle Alter FBA Table February 20, 2013 Risk Level: High Affected versions: Oracle Database Enterprise Edition 11.1, 11.2 Remote exploitable: Yes Credits: This vulnerability was discovered and researched...
TeamSHATTER Security Advisory: Oracle Database GeoRaster API overflow (CVE-2012-3220)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory Oracle Database GeoRaster API overflow February 20, 2013 Risk Level: High Affected versions: Oracle Database 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, 11.2.0.3 Remote exploitable: Yes Credits: This vulnerability w...
Fedora 17 : freeipa-2.2.2-1.fc17 (2013-2434)
Update to upstream 2.2.1 GA. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
SuSE 10 Security Update : squid (ZYPP Patch Number 8464)
A denial of service problem in Squid via invalid Content-Length headers and memory leaks has been fixed. CVE-2012-5643 / CVE-2013-0189, SQUID-2012:1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0;...
DSA-2631-1 squid3 - denial of service
Bulletin has no description...
CVE-2012-6326
CVE-2012-6326 affects VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCenter Server Appliance/vCSA 5.0 before Update 2, enabling unauthenticated remote users to trigger abnormally large log entries and cause a denial of service (disk consumption). Connected advisories conf...
RedHat Update for rdma RHSA-2013:0509-02
Check for the Version of rdma OpenVAS Vulnerability Test RedHat Update for rdma RHSA-2013:0509-02 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
