Nexus 9 With Malicious Headphones Vulnerability

Nexus 9 running Android version 7.1.1 build N4F26Q and below allows unauthorized access to the FIQ debugger via its headphones jack, which allows for information theft, weakening of ASLR, leaking of stack canaries, and more. Title: Attacking Nexus 9 with Malicious Headphones Identifier:...

Aleph 500 SQL Injection

Greetings: I found on a ALEPH500 Integrated library management system SQL Injection Vulnerabilityï¼›CVE-ID is CVE-2014-3719. Aleph 500, fully meet the industry standard, is an art class perfect librarysolution, the Ex Libris to pursue the essence of philosophy is flexible and easy to use. Ex Libr...

Aleph 500 Cross Site Scripting

Greetings: a ALEPH500 Integrated library management system Cross Site Scripting£»CVE-ID is CVE-2014-3718. Aleph 500, fully meet the industry standard, is an art class perfect librarysolution, the Ex Libris to pursue the essence of philosophy is flexible and easy to use. Ex Libris is the world...

CVE-2007-3834

Multiple cross-site scripting XSS vulnerabilities in Ex Libris ALEPH allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a URL that can be discovered through a keyword search. NOTE: this may be related to the MetaLib XSS issue, CVE-2007-3835...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Ex Libris ALEPH allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a URL that can be discovered through a keyword search. NOTE: this may be related to the MetaLib XSS issue, CVE-2007-3835...

CVE-2007-3834

CVE-2007-3834 covers multiple XSS vulnerabilities in Ex Libris ALEPH (and note may be related to the MetaLib XSS issue CVE-2007-3835). Affected: Ex Libris ALEPH; vulnerability type: cross-site scripting via unspecified vectors in a URL discoverable by keyword search. Impact details are limited to...

CVE-2007-3834

Multiple cross-site scripting XSS vulnerabilities in Ex Libris ALEPH allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a URL that can be discovered through a keyword search. NOTE: this may be related to the MetaLib XSS issue, CVE-2007-3835...

CVE-2006-6664

Format string vulnerability in Marathon Aleph One before 0.17.1 and 2006-12-17 might allow remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the TopLevelLogger::logMessageV function in Misc/Logging.cpp. NOTE: some details wer...

CVE-2006-6663

The server component in Marathon Aleph One before 0.17.1 and 2006-12-17 allows remote attackers to cause a denial of service application crash via unspecified vectors related to "gathering net games."...

CVE-2006-6663

The CVE-2006-6663 entry concerns the Marathon Aleph One server component, affected in versions prior to 0.17.1 and dated 2006-12-17. The vulnerability allows remote attackers to cause an application crash (denial of service) through unspecified vectors related to the process of “gathering net gam...

CVE-2006-6664

The CVE-2006-6664 issue affects Marathon Aleph One prior to 0.17.1 and on 2006-12-17, where a format string vulnerability in TopLevelLogger::logMessageV in Misc/Logging.cpp could allow remote attackers to cause an application crash (DoS) or execute arbitrary code. This risk is supported by the NV...

CVE-2006-6664

Format string vulnerability in Marathon Aleph One before 0.17.1 and 2006-12-17 might allow remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in the TopLevelLogger::logMessageV function in Misc/Logging.cpp. NOTE: some details wer...

CVE-2006-6663

The server component in Marathon Aleph One before 0.17.1 and 2006-12-17 allows remote attackers to cause a denial of service application crash via unspecified vectors related to "gathering net games."...

exlibris.alpeh.webserver.txt

Date: Fri, 21 May 1999 12:08:00 +0200 From: Jakub Urbanec To: [email protected] Subject: ExLibris Aleph Web server Security Alert We have found a security hole in web server bundled with Aleph librarian system ver. 3.25 and higher ExLibris. The web server in its default configuration allows...