1427 matches found
Design/Logic Flaw
Unspecified vulnerability in the Oracle Clinical/Remote Data Capture component in Oracle Industry Applications 4.6.0 and 4.6.2 allows remote authenticated users to affect confidentiality, related to HTML Surround...
CVE-2012-1763
CVE-2012-1763 affects Oracle Clinical/Remote Data Capture in Oracle Industry Applications 4.6.0 and 4.6.2. The vulnerability, related to HTML Surround, allows remote authenticated users to affect confidentiality (partial impact). CVSS metrics from NVD indicate network access with single authentic...
kernel: recv{from,msg}() on an rds socket can leak kernel memory
The rdsrecvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a 1 recvfrom or 2 recvmsg system call on an RDS socket...
CVE-2012-1743
Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0.x, 4.6.2, and 4.6.3 allows remote authenticated users to affect confidentiality, related to HTML Surround...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0.x, 4.6.2, and 4.6.3 allows remote authenticated users to affect confidentiality, related to HTML Surround...
CVE-2012-1743
CVE-2012-1743 concerns the Oracle Clinical Remote Data Capture Option in Oracle Industry Applications 4.6.0.x, 4.6.2, and 4.6.3. The description notes an unspecified vulnerability related to HTML Surround that allows remote authenticated users to affect confidentiality. The connected documents pr...
CVE-2012-1743
Unspecified vulnerability in the Oracle Clinical Remote Data Capture Option component in Oracle Industry Applications 4.6.0.x, 4.6.2, and 4.6.3 allows remote authenticated users to affect confidentiality, related to HTML Surround...
Microsoft IIS MDAC msadcs.dll RDS DataStub Content-Type Overflow(ms02-065)
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit...
Microsoft IIS - MDAC 'msadcs.dll' RDS DataStub Content-Type Overflow (MS02-065) (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Microsoft IIS MDAC msadcs.dll RD...
MS02-065 Microsoft IIS MDAC msadcs.dll RDS DataStub Content-Type Overflow
This module can be used to execute arbitrary code on IIS servers that expose the /msadc/msadcs.dll Microsoft Data Access Components MDAC Remote Data Service RDS DataFactory service. The service is exploitable even when RDS is configured to deny remote connections handsafe.reg. The service is...
MS99-025 Microsoft IIS MDAC msadcs.dll RDS Arbitrary Remote Command Execution
This module can be used to execute arbitrary commands on IIS servers that expose the /msadc/msadcs.dll Microsoft Data Access Components MDAC Remote Data Service RDS DataFactory service using VbBusObj or AdvancedDataFactory to inject shell commands into Microsoft Access databases MDBs, MSSQL...
CVE-2011-5090
GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...
Memory corruption
PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted TCP session on port 12299...
CVE-2012-0230
PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via a crafted TCP session on port 12299...
CVE-2012-0230
Affected software and component: GE Intelligent Platforms Proficy Plant Applications, specifically the Proficy Remote Data Service (PRRDS.exe) used by the suite, with default TCP port 12299. Root cause / vulnerability type: Memory corruption vulnerabilities in PRRDS.exe leading to potential remot...
CVE-2011-2309
Unspecified vulnerability in the Health Sciences - Oracle Clinical, Remote Data Capture component in Oracle Industry Applications 4.6 and 4.6.2 allows remote attackers to affect integrity, related to RDC Help...
Design/Logic Flaw
Unspecified vulnerability in the Health Sciences - Oracle Clinical, Remote Data Capture component in Oracle Industry Applications 4.6 and 4.6.2 allows remote attackers to affect integrity, related to RDC Help...
CVE-2011-2309
Unspecified vulnerability in the Health Sciences - Oracle Clinical, Remote Data Capture component in Oracle Industry Applications 4.6 and 4.6.2 allows remote attackers to affect integrity, related to RDC Help...
CVE-2011-2309
Technical details for CVE-2011-2309 are not publicly available in the provided connected documents; the description remains high level (Health Sciences RDC in Oracle Industry Applications 4.6/4.6.2). Monitor for updates.