ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1392 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0974 CVE-ID: ======= CVE-2015-0974 Release Date:...

ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities

Document Title: =============== ZTE Datacard MF19 0V1.0.0B PCW - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1392 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0974 CVE-ID: ======= CVE-2015-0974 Release Date:...

CVE-2014-0974

The bootlinuxfrommmc function in app/aboot/aboot.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly validate a certain address value, which allows attackers to write data to a...

CVE-2014-0974

The vulnerability CVE-2014-0974 affects the Little Kernel (LK) bootloader’s boot_linux_from_mmc function (app/aboot/aboot.c). The root cause is insufficient validation of a certain address value, which can allow an attacker to write data to a controllable memory location by initiating an attempte...

CVE-2013-0974

StoreKit in iOS prior to 6.1 fails to respect disabled JavaScript in Mobile Safari when a site displays a Smart App Banner, effectively re-enabling JavaScript and potentially allowing JavaScript execution via that site. Root cause: the Smart App Banner handling in StoreKit did not preserve user J...

CVE-2012-0974

Multiple cross-site scripting XSS vulnerabilities in the getParam function in oc-includes/osclass/core/Params.php in OSClass before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via the 1 sCity, 2 sPattern, 3 sPriceMax, and 4 sPriceMin parameters in a search action to...

CVE-2012-0974

OSClass

CVE-2012-0974

creationtimestamp| type| source ---|---|--- 2012-01-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36626...

CVE-2010-0974

PHPCityPortal is affected by CVE-2010-0974 due to multiple SQL injection vulnerabilities. The issue allows remote attackers to inject arbitrary SQL via the id parameter to four pages: video_show.php, spotlight_detail.php, real_estate_details.php, and auto_details.php. Root cause is improper handl...

Design/Logic Flaw

Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2009-0974 and CVE-2009-3407...

CVE-2009-0974

Technical details about CVE-2009-0974 are not publicly available in the provided documents. No specifics on affected products, root cause, or fixes are present. Monitor for updates from Oracle security advisories and vulnerability databases.

CVE-2008-0974

CVE-2008-0974 affects Double-Take 5.0.0.2865 and earlier (also distributed under HP StorageWorks Storage Mirroring). The vulnerability allows remote attackers to cause a denial of service (daemon termination) via either: (1) a large vector value triggering a “vector too long” exception, or (2) a ...

CVE-2006-0974

CVE-2006-0974 describes a cross-site scripting vulnerability in failure.asp of Battleaxe bttlxeForum 2.0, exploitable via the err_txt parameter to inject arbitrary script/HTML. Affected component: failure.asp in Battleaxe bttlxeForum 2.0. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) w...

CVE-2005-0974

CVE-2005-0974 concerns Mac OS X 10.3.9 and earlier, where an issue in the nfs_mount call is described as an unknown vulnerability that allows local users to gain privileges via crafted arguments. This is documented across multiple sources (NVD, CVE List) with the same description. The available c...

CVE-2004-0974

The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0974

The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0974

CVE-2004-0974 concerns the Netatalk package where a local user can overwrite files via a symlink attack on temporary files. The initial description specifies Trustix Secure Linux 1.5–2.1 and possibly other OSes as affected, with the root cause being insecure temporary-file handling in etc2ps.sh. ...

CVE-2002-0974

Help and Support Center for Windows XP allows remote attackers to delete arbitrary files via a link to the hcp: protocol that accesses uplddrvinfo.htm...

CVE-2002-0974

The CVE-2002-0974 entry documents a vulnerability in the Windows XP Help and Support Center where a remote attacker can cause deletion of arbitrary files by visiting a crafted link to the hcp: protocol that accesses uplddrvinfo.htm. Affected product is Windows XP Help and Support Center; the unde...

CVE-2003-0974

Applied Watch Command Center allows remote attackers to conduct unauthorized activities without authentication, such as 1 add new users to a console, as demonstrated using appliedsnatch.c, or 2 add spurious IDS rules to sensors, as demonstrated using addrule.c...