DEBIAN-CVE-2016-9152

Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...

CVE-2016-9152

Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...

CVE-2016-9152

Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...

CVE-2016-9152

Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...

CVE-2016-9152: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the rac parameter...

PT-2016-7669

Name of the Vulnerable Software and Affected Versions SPIP version 3.1.3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the rac parameter in the /ecrire/exec/plonger.php endpoint. Recommendations For SPIP version 3.1.3, update to a...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control RAC Management Component

Oracle Enterprise Manager is an enhanced management suite for ORACLE Fusion endpoint software. A security vulnerability exists in the Enterprise Manager for Oracle Database RAC Management component that can be exploited by remote attackers to compromise system confidentiality...

Oracle Enterprise Manager Cloud Control Multiple Vulnerabilities (July 2015 CPU)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple unspecified flaws in the 'Content Management' and 'RAC Management' subcomponents of the Enterprise Manager for Oracle Database component. A remote attacker can exploit these flaws to impact...

CVE-2015-4735

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management...

Design/Logic Flaw

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management...

CVE-2015-4735

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management...

CVE-2015-4735

CVE-2015-4735 affects Oracle Enterprise Manager Grid Control (RAC Management) in EM Base Platform 11.1.0.1 and EM DB Control 11.2.0.3/11.2.0.4. The vulnerability allows remote, unauthenticated access via HTTP to read a subset of data, compromising confidentiality. Public sources in connected docu...

PT-2015-6681

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control EM Base Platform version 11.1.0.1 Oracle EM DB Control versions 11.2.0.3 through 11.2.0.4 Description The issue affects confidentiality and can be exploited remotely. It is related to vectors in the RAC...

CVE-2015-4735: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in the Enterprise Manager for Oracle Database component in Oracle Enterprise Manager Grid Control EM Base Platform 11.1.0.1, and EM DB Control 11.2.0.3 and 11.2.0.4, allows remote attackers to affect confidentiality via vectors related to RAC Management...

PCNetSoftware RAC Server DoS

DoS via IOCTL call...

CVE-2014-2597 - Denial of Service in PCNetSoftware RAC Server

Vulnerability title: Denial of Service in PCNetSoftware RAC Server CVE: CVE-2014-2597 Vendor: PCNetSoftware Product: RAC Server Affected version: 4.0.4, 4.0.5 Fixed version: N/A Reported by: Kyriakos Economou Details: Latest and possibly earlier versions of RAC Server software are vulnerable to...

CVE-2014-2597

PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service disabled keyboard or crash via a large input buffer to unspecified IOCTL requests in RACDriver.sys, which triggers a buffer over-read...

Buffer overflow

PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service disabled keyboard or crash via a large input buffer to unspecified IOCTL requests in RACDriver.sys, which triggers a buffer over-read...

CVE-2014-2597

PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service disabled keyboard or crash via a large input buffer to unspecified IOCTL requests in RACDriver.sys, which triggers a buffer over-read...

CVE-2014-2597

PCNetSoftware RAC Server is affected (versions 4.0.4 and 4.0.5). The issue lies in RACDriver.sys kernel-mode driver handling IOCTL requests: a large input buffer is not properly validated against the static buffer, causing a buffer over-read and enabling local DoS—either keyboard input is disable...