PT-2015-7178 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA software versions 9.0 through 9.04.37 Cisco Adaptive Security Appliance ASA software versions 9.1 through 9.16.6 Cisco Adaptive Security Appliance ASA software versions 9.2 through 9.24 Cisco Adaptive...

Cisco ASA VPN XML Parser DoS Vulnerability (cisco-sa-20150408-asa)

Cisco ASA is prone to a DoS vulnerability in the VPN XML Parser. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

PostgreSQL contrib/hstore/hstore_io.c整数溢出漏洞

CVE ID:CVE-2014-2669 PostgreSQL是一款高级对象－关系型数据库管理系统，支持扩展的SQL标准子集。 PostgreSQL contrib/hstore/hstoreio.c存在整数溢出，允许远程通过验证的用户使应用程序崩溃。漏洞与hstorerecv, hstorefromarrays和hstorefromarray函数相关。 0 PostgreSQL 9.0.x PostgreSQL 9.1.x PostgreSQL 9.2.x PostgreSQL 9.3.x PostgreSQL...

PostgreSQL 8.4 < 8.4.20 / 9.0 < 9.0.16 / 9.1 < 9.1.12 / 9.2 < 9.2.7 / 9.3 < 9.3.3 Multiple Vulnerabilities

The version of PostgreSQL installed on the remote host is 8.4.x prior to 8.4.20, 9.0.x prior to 9.0.16, 9.1.x prior to 9.1.12, 9.2.x prior to 9.2.7 or 9.3.x prior to 9.3.3. It is, therefore, potentially affected by multiple vulnerabilities : - SET ROLE bypasses lack of ADMIN OPTION when granting...

Design/Logic Flaw

PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly provides the superuser password to scripts related to "graphical installers for Linux and Mac OS X," which has unspecified impact and attack vectors...

Out-of-bounds

PostgreSQL 9.2.x before 9.2.3, 9.1.x before 9.1.8, 9.0.x before 9.0.12, 8.4.x before 8.4.16, and 8.3.x before 8.3.23 does not properly declare the enumrecv function in backend/utils/adt/enum.c, which causes it to be invoked with incorrect arguments and allows remote authenticated users to cause a...

NetOp Remote Control 8.0, 9.1, 9.2, 9.5 Buffer Overflow

Exploit for windows platform in category remote exploits Exploit Title: NetOp Remote Control Buffer Overflow Date: April 28, 2011 Author: chap0 Version: 8.0, 9.1, 9.2, 9.5 Possibly anything before ver 10 Upgrade to Version 10 for fix Tested on: Windows XP SP3 Greetz to JJ IE by day Ninja by night...

NetOp Remote Control 8.0/9.1/9.2/9.5 - Local Buffer Overflow

Exploit Title: NetOp Remote Control Buffer Overflow Date: April 28, 2011 Author: chap0 Version: 8.0, 9.1, 9.2, 9.5 Possibly anything before ver 10 Upgrade to Version 10 for fix Tested on: Windows XP SP3 Greetz to JJ IE by day Ninja by night, br34dcrumb5, myne-us, Exploit-DB, Corelan !/usr/bin/per...

VSR Advisories: Citrix Access Gateway Command Injection Vulnerability

VSR Security Advisory http://www.vsecurity.com/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Advisory Name: Citrix Access Gateway Command Injection Vulnerability Release Date: 2010-12-21 Application: Citrix Access Gateway Versions: Access Gateway Enterprise...

Adobe Reader and Acrobat 'newplayer()' JavaScript Method Remote Code Execution Vulnerability

Description Adobe Reader and Acrobat are prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code. Failed exploit attempts will likely cause denial-of-service conditions. This issue affects Reader and Acrobat 9.2 and prior versions. Technologies...

PT-2008-4033 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle BEA Product Suite versions 9.2 MP1 and 10.0 Description: The issue concerns an unspecified vulnerability in the WebLogic Server component, with unknown impact and local attack vectors. There is no information provided about the estimat...

iDefense Security Advisory 05.23.07: Opera Software Opera Web Browser Transfer Item Pop-up Menu Stack Overflow Vulnerability

Opera Software Opera Web Browser Transfer Item Pop-up Menu Stack Overflow Vulnerability iDefense Security Advisory 05.23.07 http://labs.idefense.com/intelligence/vulnerabilities/ May 23, 2007 I. BACKGROUND Opera is a cross-platform web browser. More information is available at http://www.opera.co...

SOL4447 - cURL buffer overflow vulnerability - CAN-2005-0490

Multiple stack-based buffer overflows in libcURL and cURL 7.12.1, and possibly other versions, allow remote malicious web servers to execute arbitrary code via base64 encoded replies that exceed the intended buffer lengths when decoded, which is not properly handled by 1 the Curlinputntlm functio...

Code injection

BEA WebLogic Server 9.0, 9.1, and 9.2 Gold, when running on Solaris 9, allows remote attackers to cause a denial of service server inaccessibility via manipulated socket connections...