9500 matches found
CVE-2011-4041
The CVE-2011-4041 issue affects Advantech/BroadWin WebAccess WebAccess Network Service (RPC on TCP 4592). A long string in an RPC request can lead to remote code execution or the disclosure of the security-code value. Public exploit code has been posted; the vulnerability applies to all WebAccess...
CVE-2011-4041
webvrpcs.exe in Advantech/BroadWin WebAccess allows remote attackers to execute arbitrary code or obtain a security-code value via a long string in an RPC request to TCP port 4592...
CVE-2011-4609
The svcrun function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service CPU consumption via a large number of RPC connections...
CVE-2011-4041: Improper Control of Generation of Code
webvrpcs.exe in Advantech/BroadWin WebAccess allows remote attackers to execute arbitrary code or obtain a security-code value via a long string in an RPC request to TCP port 4592...
PT-2012-1791
Name of the Vulnerable Software and Affected Versions Advantech/BroadWin WebAccess version affected versions not specified Description The issue allows remote attackers to execute arbitrary code or obtain a security-code value via a long string in an RPC request to TCP port 4592, specifically...
CVE-2012-0440
Cross-site request forgery CSRF vulnerability in jsonrpc.cgi in Bugzilla 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 allows remote attackers to hijack the authentication of arbitrary users for requests that use the JSON-RPC API...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in jsonrpc.cgi in Bugzilla 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 allows remote attackers to hijack the authentication of arbitrary users for requests that use the JSON-RPC API...
CVE-2012-0440
Cross-site request forgery CSRF vulnerability in jsonrpc.cgi in Bugzilla 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 allows remote attackers to hijack the authentication of arbitrary users for requests that use the JSON-RPC API...
CVE-2012-0440
CVE-2012-0440 is a CSRF vulnerability in Bugzilla’s JSON-RPC API (jsonrpc.cgi) that could allow an attacker to hijack the authentication of arbitrary users for JSON-RPC requests. Affected Bugzilla versions include 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x bef...
CVE-2012-0440
Cross-site request forgery CSRF vulnerability in jsonrpc.cgi in Bugzilla 3.5.x and 3.6.x before 3.6.8, 3.7.x and 4.0.x before 4.0.4, and 4.1.x and 4.2.x before 4.2rc2 allows remote attackers to hijack the authentication of arbitrary users for requests that use the JSON-RPC API...
PT-2012-2562
Name of the Vulnerable Software and Affected Versions Bugzilla versions 3.5.x through 3.6.7 Bugzilla versions 3.7.x through 4.0.3 Bugzilla versions 4.1.x through 4.2rc1 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of arbitrary...
Medium: glibc
Issue Overview: An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute...
bugzilla -- multiple vulnerabilities
A Bugzilla Security Advisory reports: The following security issues have been discovered in Bugzilla: Account Impersonation: When a user creates a new account, Bugzilla doesn't correctly reject email addresses containing non-ASCII characters, which could be used to impersonate another user accoun...
CentOS 6 : glibc (CESA-2012:0058)
Updated glibc packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
glibc, nscd security update
CentOS Errata and Security Advisory CESA-2012:0058 Updated glibc packages that fix two security issues and three bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System...
Samba SRVSVC RPC sec_io_acl Request Handling Heap Buffer Overflow
A heap-based buffer overflow vulnerability exists in the way Samba handles RPC messages...
PT-2012-1065
Name of the Vulnerable Software and Affected Versions glibc versions 2.3.4 glibc-common versions 2.3.4 glibc-devel versions 2.3.4 glibc-headers versions 2.3.4 glibc-profile versions 2.3.4 glibc-utils versions 2.3.4 nptl-devel versions 2.3.4 Description The issue affects the glibc package in Red H...
IBM WebSphere Application Server z/OS跨站脚本和未明漏洞
IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。 IBM WebSphere Application Server for z/OS存在安全漏洞，允许攻击者进行跨站脚本和其他攻击。 1以JAX-RPC SW-Security装载类时存在WSEC5007E错误。 2传递给WEB消息组件的未明输入在返回用户之前缺少过滤，可导致跨站脚本攻击，可获得敏感信息或劫持用户会话。 0 IBM WebSphere Application Server for z/OS...
Novell Netware XNFS caller_name xdrDecodeString Code Execution
Application: Novell Netware XNFS callername xdrDecodeString Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-11 PRL: 2012-03 Author: Francis Provencher Protek Research Lab's Website:...
