PT-2017-10087

Name of the Vulnerable Software and Affected Versions Moxa NPort 5110 versions prior to 2.6 Moxa NPort 5130/5150 Series versions prior to 3.6 Moxa NPort 5200 Series versions prior to 2.8 Moxa NPort 5400 Series versions prior to 3.11 Moxa NPort 5600 Series versions prior to 3.7 Moxa NPort 5100A...

PT-2016-2956 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 23.0.0.207 and earlier Adobe Flash Player versions 11.2.202.644 and earlier Description: The issue is related to the MovieClip class and involves a use after free vulnerability, allowing a remote attacker to execut...

PT-2020-2612 · Mysql Server +9 · Mysql Server +9

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.6.47 and prior MySQL Server versions 5.7.29 and prior MySQL Server versions 8.0.19 and prior Description: The issue is related to the Server: Stored Procedure component of MySQL Server and is caused by inadequate acces...

CVE-2014-0570

Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2014-2026 · Adobe +3 · Air Sdk & Compiler +6

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 13.0.0.258 Adobe Flash Player versions 14.x and 15.x prior to 15.0.0.239 Adobe Flash Player version prior to 11.2.202.424 on Linux Adobe AIR version prior to 15.0.0.293 Adobe AIR SDK version prior to...

JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (Install)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE-2013-5905...

JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (Install)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE-2013-5906...

OpenJDK: CRL and certificate extensions handling improvements (Security, 7143872)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.237 and earlier allows remote attackers to affect availability via unknown vectors related to Security...

PT-2012-4518 · Mysql Server +3 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.1.64 and earlier MySQL Server versions 5.5.26 and earlier Description: The issue allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer. Recommendations: For MySQL Serv...

JDK: unspecified vulnerability fixed in 6u31 and 7u3 (2D)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier; and JavaFX 2.0.2 and earlier; allows remote attackers to affect confidentiality, integrity, and availabili...

PT-2012-1180 · Rsyslog +2 · Rsyslog +2

Name of the Vulnerable Software and Affected Versions: rsyslog versions prior to 8.4.2 rsyslog versions 4.x prior to 4.6.6 rsyslog versions 5.x prior to 5.7.4 rsyslog versions 6.x prior to 6.1.4 Description: The issue is related to multiple vulnerabilities in the rsyslog package, which can be...

OpenJDK: missing checkSetFactory calls in HttpsURLConnection (JSSE, 7096936)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity,...

Cross-site scripting vulnerability in multiple Rocomotion products

Overview Multiple products provided by Rocomotion contain a cross-site scripting vulnerablility. Multiple products P board etc. provided by Rocomotion contain a cross-site scripting vulnerablility. Saeki Tominaga of KINOTROPE INC. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

PT-2010-4084 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP versions 5.2.0 through 5.2.13 PHP versions 5.3.0 through 5.3.2 Description: The issue allows remote attackers to obtain sensitive information by causing the application to exceed limits for memory, execution time, or recursion, due to the...

PT-2009-1122

Name of the Vulnerable Software and Affected Versions Adobe Reader versions 8.x through 8.2 Adobe Reader versions 9.x through 9.3 Adobe Acrobat versions 8.x through 8.2 Adobe Acrobat versions 9.x through 9.3 Description The issue is related to a use-after-free vulnerability in the...

Fedora 10 : php-ZendFramework-1.7.7-2.fc10 (2009-2823)

Tue Mar 17 2009 Alexander Kahl - 1.7.7-2 - bump cannot remove spurious -1 tag - Tue Mar 17 2009 Alexander Kahl - 1.7.7-1 - update to 1.7.7 - PHPUnit dep now = 3.3.0 - moved Ldap bindings to extra packages php-ldap dep - excluded db adapters with unresolvable deps - moved mysqli db adapter files...

PT-2008-3473 · Apache +2 · Apache Tomcat +2

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 5.5.9 through 5.5.26 Apache Tomcat versions 6.0.0 through 6.0.16 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the name parameter also known as the...

PT-2006-5716 · Perpetual Motion Interactive Systems · Dotnetnuke

Name of the Vulnerable Software and Affected Versions: Perpetual Motion Interactive Systems DotNetNuke versions prior to 3.3.5 Perpetual Motion Interactive Systems DotNetNuke versions 4.x prior to 4.3.5 Description: A cross-site scripting issue allows remote attackers to inject arbitrary HTML via...

SRT2003-11-06-0710 - IBM DB2 Multiple local security issues

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

PT-2002-1151 · Microsoft +1 · Cmd.Exe +2

Name of the Vulnerable Software and Affected Versions: Apache for Win32 versions 1.3.24 and earlier Apache for Win32 versions 2.0.x through 2.0.34-beta Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters, such as a | pipe character, provided as...