EUVD-2012-0346

Malware in sbrugna...

EUVD-2012-0345

Malware in sbrugna...

Command injection

The DataSim and DataPid demonstration clients in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote servers to cause a denial of service incorrect pointer access and client cra...

CVE-2013-0682

Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 do not properly handle exceptions, which allows remote attackers to cause a denial of service application crash or possibly execute...

CVE-2013-0681

CVE-2013-0681 affects Cogent Real-Time Systems products (Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub Windows before 6.4.22, DataHub QuickTrend before 7.3.0). The issue is a NULL pointer dereference in the parser when handling malformed data in a formatted text command ...

PT-2013-2525

Name of the Vulnerable Software and Affected Versions Cogent DataHub versions prior to 7.3.0 OPC DataHub versions prior to 6.4.22 Cascade DataHub versions prior to 6.4.22 DataHub QuickTrend versions prior to 7.3.0 Description A stack-based buffer overflow issue in the web server component allows...

CVE-2013-0681: Improper Input Validation

Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote attackers to cause a denial of service NULL pointer dereference and application crash via malformed data in a formatted text...

CVE-2013-0682: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 do not properly handle exceptions, which allows remote attackers to cause a denial of service application crash or possibly execute...

PT-2013-2528

Name of the Vulnerable Software and Affected Versions Cogent DataHub versions prior to 7.3.0 OPC DataHub versions prior to 6.4.22 Cascade DataHub versions prior to 6.4.22 DataHub QuickTrend versions prior to 7.3.0 Description The issue allows remote servers to cause a denial of service, resulting...

CVE-2013-0680: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the web server in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allows remote attackers to cause a denial of service daemon crash or possibly execute...

Cogent OPC DataHub and Cascade DataHub XSS and CRLF Vulnerabilities

This host is installed with OPC DataHub or Cascade DataHub and is prone to cross site scripting and CRLF vulnerabilities. OpenVAS Vulnerability Test $Id: gbcogentcascadenopcdatahubmultvuln.nasl 6022 2017-04-25 12:51:04Z teissa $ Cogent OPC DataHub and Cascade DataHub XSS and CRLF Vulnerabilities...

Cogent OPC DataHub and Cascade DataHub < 7.2 XSS and CRLF Vulnerabilities

OPC DataHub or Cascade DataHub is prone to multiple cross-site scripting XSS and CRLF vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2012-0309

Cross-site scripting XSS vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0309: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-0310: Improper Control of Generation of Code

CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

PT-2012-2485

Name of the Vulnerable Software and Affected Versions Cogent DataHub versions 7.1.2 and earlier Cascade DataHub versions 6.4.20 and earlier OPC DataHub versions 6.4.20 and earlier Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject...

PT-2012-2486

Name of the Vulnerable Software and Affected Versions Cogent DataHub versions 7.1.2 and earlier Cascade DataHub versions 6.4.20 and earlier OPC DataHub versions 6.4.20 and earlier Description The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting...