5784 matches found
CVE-2014-5505: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary code via a crafted data source string in an RPT file...
ManageEngine EventLog Analyzer - Multiple Vulnerabilities
No description provided by source. Mogwai Security Advisory MSA-2014-01 ---------------------------------------------------------------------- Title: ManageEngine EventLog Analyzer Multiple Vulnerabilities Product: ManageEngine EventLog Analyzer Affected versions: EventLog Analyzer 9.9 Build 9002...
PT-2014-6501
Name of the Vulnerable Software and Affected Versions SAP Crystal Reports affected versions not specified Description The issue is related to a stack-based buffer overflow in SAP Crystal Reports, which allows remote attackers to execute arbitrary code. This can be achieved by crafting a specific...
PT-2014-6502
Name of the Vulnerable Software and Affected Versions SAP Crystal Reports affected versions not specified Description The issue is related to a double free vulnerability in the connection string processing of SAP Crystal Reports. This vulnerability allows remote attackers to execute arbitrary cod...
SAP Crystal Reports Datasource Stack Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Crystal Reports. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling...
SAP Crystal Reports Connection String Processing Double Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP Crystal Reports. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling...
ManageEngine EventLog Analyzer - Multiple Vulnerabilities (1)
Mogwai Security Advisory MSA-2014-01 ---------------------------------------------------------------------- Title: ManageEngine EventLog Analyzer Multiple Vulnerabilities Product: ManageEngine EventLog Analyzer Affected versions: EventLog Analyzer 9.9 Build 9002 on Windows/Linux Impact: critical...
VTLS-Virtua 2014 /web_reports/cgi-bin/InfoStation.cgi SQL注入漏洞
No description provided by source...
Intelligence Insiders Disclose Bug Information With Tor
The executive director of the Tor Project told the BBC that U.S. and U.K. intelligence agencies are in an internal cat and mouse game, with one faction trying to break the anonymity network, and another one sharing bugs anonymously with Tor developers. Andrew Leman, in an extensive...
Crescendo - Sales CRM Authentication Bypass Vulnerability
Exploit for asp platform in category web applications Crescendo - Sales CRM Authentication Bypass Vulnerability Exploit Title: Crescendo - Sales CRM Authentication Bypass Vulnerability Sql Injection Google Dork: N/A Date: July 15 , 2014 Exploit Author: Monendra Sahu email protected Vendor Homepag...
Updated ocsinventory packages fix security vulnerability
Multiple cross-site scripting XSS vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or HTML via unspecified vectors CVE-2014-4722. Also, the web interface has been fixed to work with Apache HTTPD 2.4...
Barracuda Networks #35 Web Firewall 610 v6.0.1 - Filter Bypass & Persistent Vulnerability
Document Title: =============== Barracuda Networks 35 Web Firewall 610 v6.0.1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1101 Barracuda Networks Security ID BNSEC: BNSEC-2361...
Dirs3arch - HTTP(S) Directory/File Brute Forcer
dirs3arch is a simple command line tool designed to brute force directories and files in websites. Features Keep alive connections Multithreaded Detect not found web pages when 404 not found errors are masked .htaccess, web.config, etc. Recursive brute forcing Usage: dirs3arch.py -u|--url target...
DEBIAN-CVE-2014-4722
Multiple cross-site scripting XSS vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
UBUNTU-CVE-2014-4722
Multiple cross-site scripting XSS vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-4722
Multiple cross-site scripting XSS vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-4722: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the OCS Reports Web Interface in OCS Inventory NG allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2014-6074
Name of the Vulnerable Software and Affected Versions OCS Inventory NG affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the OCS Reports Web Interface. These vulnerabilities allow remote attackers to inject arbitrary web script or...
Oracle Reports Server 6.0.8/9.0.x XML File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14311/info Oracle Reports Server may allow remote attackers to disclose parts of arbitrary XML files. Reportedly, the server fails to restrict users from accessing parts of arbitrary XML files when handling specially...