215 matches found
CVE-2017-10221
Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications subcomponent: OPS Operations. The supported version that is affected is 5.5. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality RE...
CVE-2017-10225
Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications subcomponent: OPS Operations. The supported version that is affected is 5.5. Difficult to exploit vulnerability allows physical access to compromise Oracle Hospitality RES 3700. While the vulnerability i...
glibc Remote Denial of Service Vulnerability
glibc a.k.a. GNU C Library, libc6 is an open-source, free C language compiler released under the LGPL license. A security vulnerability exists in resquery of libresolv in versions of glibc prior to 2.25. A remote attacker could exploit this vulnerability to cause a denial of service...
CVE-2 0 1 6-1 0 1 9: a Magnitude attack tool flash vulnerability-vulnerability warning-the black bar safety net
Last month, Proofpoint has a security researchers found the Magnitude of attack tools there appears to be some new stuff. So in their cooperation we analyzed the sample and found that Magnitude EK added before exist in the Adobe Flash Player Vulnerability, cve-2 0 1 6-1 0 1 9, and then the wild u...
glibc getaddrinfo 栈缓冲区溢出漏洞(CVE-2015-7547)
漏洞概要 Glibc是GNU发布的LIBC库的C运行库，Glibc是Linux系统中最底层的API，基本其它任何运行库都会依赖于Glibc。Glibc除了封装Linux操作系统所提供的系统服务外，还提供了其它的必要服务的实现。由于 Glibc 几乎包含所有的 UNIX 通行的标准，可以说是操作系统重要支撑库。 Glibc中的 DNS...
CVE-2007-5896
Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service CPU consumption and crash via an iframe with Javascript that sets the document.location to contain a leading NULL byte \x00 and a 1 res://, 2 about:config, or 3 file:/// URI...
PT-2015-3672 · D Link · D-Link Dap-1360
Name of the Vulnerable Software and Affected Versions: D-Link DAP-1360 router versions 2.5.4 and later Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the res buf parameter to "index.cgi" when res config id is set to 41. This could...
DEBIAN-CVE-2014-6610
Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when using the resfaxspandsp module, allows remote authenticated users to cause a denial of service crash via an out of call message, which is not properly handled in the ReceiveFax...
WorldSpan Res Manager 4.1 Malformed TCP Packet Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5169/info It has been reported that WorldSpan Res Manager 4.1 for Microsoft Windows is vulnerable to a denial of service condition. Res Manager systems are connected to Worldspan via private lines or through the Internet...
Microsoft Internet Explorer 5 ShowHelp Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6780/info Microsoft Internet Explorer implements the showHelp function as a means of displaying help content contained in HTML pages. However, this function is capable of performing too many other actions outside of its...
Microsoft Internet Explorer 8 Beta 1 - 'ieframe.dll' Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28581/info Microsoft Internet Explorer is prone to a script-injection vulnerability when handling specially crafted requests to 'acrerror.htm' via the 'res://' protocol. The file resides in the 'ieframe.dll' dynamic-link...
PT-2014-5486 · D Link · D-Link Dap 1150
Name of the Vulnerable Software and Affected Versions: D-Link DAP 1150 version 1.2.94 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the res buf parameter to "index.cgi" in the Control/URL-filter section. Recommendations: For D-Lin...
CVE-2014-0946
The RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 does not send appropriate Cache-Control HTTP headers, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert...
Cross site scripting
Cross-site scripting XSS vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-0945
IBM Operational Decision Manager (UK ODM) RES Console vulnerability CVE-2014-0945 is a cross-site scripting issue in the Rule Execution Server. A remote authenticated user can exploit a crafted URL to execute script in the victim’s browser. Affected products/versions include ODM v7.5 before FP3 I...
CVE-2014-0946
CVE-2014-0946 concerns IBM Operational Decision Manager (ODM) RES Console in Rule Execution Server. The vulnerability arises from missing Cache-Control HTTP headers, which could allow an attacker to obtain sensitive information from an unattended workstation. Affected products/versions include IB...
CVE-2014-0944
IBM ODM is vulnerable to CSRF in the RES Console of Rule Execution Server. Affected: IBM WebSphere Operational Decision Manager v7.5 (before FP3 IF37), v8.0 (before MP1 FP2), and v8.5 (before MP1 IF26). Root cause described as improper validation of user-supplied input in the RES Console, enablin...
CVE-2014-0945
Cross-site scripting XSS vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2013-7331
The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild ...