CVE-2009-3344

Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service infinite loop via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable...

CVE-2009-3345

Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author...

Heap overflow

Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author...

Code injection

Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However,...

Code injection

Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service infinite loop via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable...

CVE-2009-3344

CVE-2009-3344 concerns SAP Crystal Reports Server 2008 on Windows XP with a denial-of-service condition (infinite loop) reported via VulnDisco Pack 8.3–8.11. The public disclosure includes no actionable information and does not specify the attack vectors, affected components, or a fix. Multiple s...

CVE-2009-3345

Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author...

CVE-2009-3346

Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However,...

CVE-2009-3344

Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service infinite loop via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable...

CVE-2009-3346

The CVE-2009-3346 entry concerns SAP Crystal Reports Server 2008 with an unspecified vulnerability that could allow remote code execution via unknown vectors, as demonstrated by VulnDisco Pack Professional versions 8.3–8.11. The description notes that, as of 2009-09-17, there is no actionable inf...

CVE-2009-3345

CVE-2009-3345 describes a heap-based buffer overflow in SAP Crystal Reports Server 2008. The vulnerability is evidenced by a module in VulnDisco Pack Professional 8.3–8.11. The Initial Description notes unknown impact and attack vectors as of disclosure, and actionability was limited at the time....

CVE-2009-3258

vtiger CRM before 5.1.0 allows remote authenticated users, with certain View privileges, to delete 1 attachments, 2 reports, 3 filters, 4 views, and 5 tickets; insert 6 attachments, 7 reports, 8 filters, 9 views, and 10 tickets; and edit 11 reports, 12 filters, 13 views, and 14 tickets via...

CVE-2009-3258

vtiger CRM before 5.1.0 allows remote authenticated users, with certain View privileges, to delete 1 attachments, 2 reports, 3 filters, 4 views, and 5 tickets; insert 6 attachments, 7 reports, 8 filters, 9 views, and 10 tickets; and edit 11 reports, 12 filters, 13 views, and 14 tickets via...

CVE-2009-3023

creationtimestamp| type| source ---|---|--- 2009-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9541 2009-09-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9559 2010-11-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16740 2018-05-29...

kernel security and bug fix update

2.6.18-128.1.14.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

[DSECRG-09-036] Chance-i Techno Vision Security System - Directory Traversal File Download

Digital Security Research Group DSecRG Advisory DSECRG-09-036 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-036.html Application: Chance-i DiViS DVR System web-server Versions Affected: 2.0 Vendor URL: http://www.chance-i.com/ Bug: Directory Traversal File Download Exploits: YES...

Crystal Reports viewreport.asp页面跨站脚本漏洞

BUGTRAQ ID: 34341 Crystal Reports是一种报表工具包，允许用户迅速创建灵活、特性丰富的报表，并集成到Web和Windows应用程序中。 Crystal Reports的viewreport.asp页面没有用户所提交的ID、PROMPTEX-SESSIONID、PROMPTEX-TODATE、 PROMPTEX-FROMDATE、PROMPTEX-YEARQTR1、PROMPTEX-YEARQTR2、PROMPTEX- YEARQTR3、PROMPTEX-YEARQTR4、PROMPTEX-YEARQTR5、PROMPTEX-YEARQTR6、...

Q&A: Dino Dai Zovi

Dino Dai Zovi has gained a reputation as one of the top Apple security researchers in the industry and is the author of a new book on Apple security, “The Mac Hacker’s Handbook.” In this interview, he talks about the state of Apple security, why the company hasn’t implemented better memory...

SAP Business Objects Crystal Reports 7-10 - 'viewreport.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34341/info SAP Business Objects Crystal Reports is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal...

Crystal Reports Cross Site Scripting

SAP BusinessObjects Crystal Reports viewreport.asp Multiple Parameter XSS - Description Cross-site scripting; vbscript rather than javascript. Subsequent page will contain pop up reading "fsckcissp". ID, PROMPTEX-SESSIONID, PROMPTEX-TODATE, PROMPTEX-FROMDATE, PROMPTEX-YEARQTR1, PROMPTEX-YEARQTR2,...