CVE-2017-16664

Removed by vendor...

CVE-2017-16664: Improper Control of Generation of Code

Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System OTRS 5 before 5.0.24, 4 before 4.0.26, and 3.3 before 3.3.20. In the agent interface, an authenticated remote attacker can execute shell commands as the webserver user via URL manipulation...

CVE-2015-8787

The nfnatredirectipv4 function in net/netfilter/nfnatredirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by sending certain IPv4 packets to an incompletely configured...

CVE-2015-1099

Race condition in the setreuid system-call implementation in the kernel in Apple iOS before 8.3, Apple OS X before 10.10.3, and Apple TV before 7.2 allows attackers to cause a denial of service via a crafted app...

CVE-2014-1471

SQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in Open Ticket Request System OTRS 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allows remote attackers to execute arbitrary SQL commands via vectors related to a ticket search URL...

CVE-2014-1471: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in Open Ticket Request System OTRS 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allows remote attackers to execute arbitrary SQL commands via vectors related to a ticket search URL...

PT-2014-4199

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 3.1.x through 3.1.18 Open Ticket Request System OTRS versions 3.2.x through 3.2.13 Open Ticket Request System OTRS versions 3.3.x through 3.3.3 Description A SQL injection issue exists in the...

PT-2013-1329

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS Help Desk versions 3.0.x through 3.0.21 Open Ticket Request System OTRS Help Desk versions 3.1.x through 3.1.17 Open Ticket Request System OTRS Help Desk versions 3.2.x through 3.2.8 Description The issue is...

Cisco Unified IP Phone Local Kernel System Call Input Validation Vulnerability

Cisco Unified IP Phones 7900 Series versions 9.31SR1 and prior contain an arbitrary code execution vulnerability that could allow a local attacker to execute code or modify arbitrary memory with elevated privileges. This vulnerability is due to a failure to properly validate input passed to kerne...

CVE-2012-3211

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/System Call...

CVE-2012-3211

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/System Call...

PT-2012-4570

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris versions 10 and 11 Description The issue affects the availability of the system, allowing local users to exploit it via unknown vectors related to Kernel/System Call in Oracle Sun Solaris. Recommendations For Oracle Sun...

CVE-2012-3211: Undefined Security Weakness

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/System Call...

CVE-2012-0217

The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microso...

PT-2012-2408

Name of the Vulnerable Software and Affected Versions Xen versions 4.1.2 and earlier Citrix XenServer versions 6.0.2 and earlier Oracle Solaris versions 11 and earlier illumos versions prior to r13724 Joyent SmartOS versions prior to 20120614T184600Z FreeBSD versions prior to 9.0-RELEASE-p3 NetBS...

Race condition

Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System OTRS before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets...

CVE-2010-4765

Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System OTRS before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets...

CVE-2010-4765

Removed by vendor...

CVE-2010-4765: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System OTRS before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets...

PT-2011-1714

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 2.4.8 Description A race condition exists in the Kernel::System::Main::FileWrite method, allowing remote authenticated users to corrupt the TicketCounter.log data in certain circumstances by...