Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
RealnetworksHelix Server14.0.1

8 matches found

CVE
CVE•added 2012/04/17 4:26 a.m.•127 views

CVE-2012-1923

RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm_b_db\users, which allows local users to obtain sensitive information by reading a database.

2.1CVSS5.5AI score0.00239EPSS
CVE
CVE•added 2012/04/17 4:26 a.m.•116 views

CVE-2012-0942

Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to execute arbitrary code via crafted authentication credentials.

7.5CVSS8.1AI score0.03731EPSS
CVE
CVE•added 2012/04/17 4:26 a.m.•47 views

CVE-2012-1985

Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to hijack the authentication of administrators for requests that cause a denial of service (stack consumption and daemon crash) via a malformed URL.

6.8CVSS7.1AI score0.0022EPSS
CVE
CVE•added 2012/04/17 4:26 a.m.•46 views

CVE-2012-1984

Multiple cross-site scripting (XSS) vulnerabilities in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3CVSS5.8AI score0.00256EPSS
CVE
CVE•added 2011/04/04 12:27 p.m.•39 views

CVE-2010-4235

Format string vulnerability in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via vectors related to the x-wap-profile HTTP header.

10CVSS7.7AI score0.04348EPSS
CVE
CVE•added 2012/04/17 4:26 a.m.•39 views

CVE-2012-2267

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (daemon crash) by establishing and closing a port-705 TCP connection, a different vulnerability than CVE-2012-1923.

5CVSS6.4AI score0.0073EPSS
CVE
CVE•added 2012/04/17 4:26 a.m.•36 views

CVE-2012-2268

master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause a denial of service (unhandled exception and daemon crash) via a crafted Open-PDU request that triggers incorrect DisplayString processing, a different vulner...

5CVSS6.3AI score0.00603EPSS
CVE
CVE•added 2011/04/04 12:27 p.m.•34 views

CVE-2010-4596

Stack-based buffer overflow in RealNetworks Helix Server 12.x, 13.x, and 14.x before 14.2, and Helix Mobile Server 12.x, 13.x, and 14.x before 14.2, allows remote attackers to execute arbitrary code via a long string in an RTSP request.

9.3CVSS8.2AI score0.05834EPSS