84 matches found
CVE-2018-4006
CVE-2018-4006 concerns Shimo VPN 4.1.5.1: a privilege-escalation flaw in the helper tool’s writeConfig function. A non-root user with local access can write a file anywhere on the system and, through this, escalate privileges to root. The issue arises from the helper service running with elevated...
CVE-2017-4006
CVE-2017-4006 is a rejected candidate and not an active vulnerability entry.
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4006)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-4006 advisory. - x86/ia32: save and clear registers on syscall. Jamie Iles Orabug: 27355759 CVE-2017-5754 - pti: Rename X86FEATUREKAISER to X86FEATUREPTI Pavel Tatashin...
[SECURITY] [DSA 4006-2] mupdf security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4006-2 [email protected] https://www.debian.org/security/ November 10, 2017 https://www.debian.org/security/faq - -------------------------------------------------------------------------...
Debian DSA-4006-1 : mupdf - security update
Multiple vulnerabilities have been found in MuPDF, a PDF file viewer, which may result in denial of service or the execution of arbitrary code. - CVE-2017-14685, CVE-2017-14686, and CVE-2017-14687 WangLin discovered that a crafted .xps file can crash MuPDF and potentially execute arbitrary code i...
Debian: Security Advisory (DSA-4006-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 3585-1] wireshark security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3585-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 22, 2016 https://www.debian.org/security/faq -...
CVE-2016-4006
epan/proto.c in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not limit the protocol-tree depth, which allows remote attackers to cause a denial of service stack memory consumption and application crash via a crafted packet...
CVE-2016-4006
CVE-2016-4006 affectsWireshark 1.12.x (before 1.12.11) and 2.0.x (before 2.0.3). The vulnerability arises because epan/proto.c does not limit the protocol-tree depth, enabling a remote attacker to crash the application via a crafted packet due to stack memory exhaustion. Affected product details ...
CVE-2016-4006
epan/proto.c in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not limit the protocol-tree depth, which allows remote attackers to cause a denial of service stack memory consumption and application crash via a crafted packet...
CVE-2013-4006
IBM WebSphere Application Server WAS Liberty Profile 8.5 before 8.5.5.1 uses weak permissions for unspecified files, which allows local users to obtain sensitive information via standard filesystem operations...
CVE-2013-4006
CVE-2013-4006 affects IBM WebSphere Application Server Liberty Profile 8.5 (before 8.5.5.1). The vulnerability is due to insecure permissions on files created by the Liberty server, enabling a local attacker to obtain sensitive information via normal filesystem operations. A fix is to apply IBM F...
CVE-2012-4006
CVE-2012-4006 affects multiple GREE Android apps (GREE, Tanken Dorirando, Tsurisuta, Monpura, Kaizokuoukoku Columbus, haconiwa, Seisen Cerberus, and GREE Market) prior to the listed versions. A vulnerability in the WebView implementation allows a crafted application to obtain sensitive informatio...
CVE-2011-4006
The CVE-2011-4006 issue affects Cisco ASA 5500 series with software 8.2–8.5, caused by a vulnerability in the ESMTP inspection feature that can be exploited to trigger a denial-of-service via an unspecified closing sequence, leading to CPU consumption. Remediation/mitigation reported in connected...
WSN Links SQL injection vulnerability-vulnerability warning-the black bar safety net
WSN Links is an advanced PHP-based/MySQL search script, WSN Links 6.0.1, 5.1.51;, 5.0.81 version of the search. php file existsSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: 'WSN Links' SQL Injection Vulnerability CVE-2 0 1 0-4 0 0 6 Mark Stanislav -...
WSN Links - SQL Injection
'WSN Links' SQL Injection Vulnerability CVE-2010-4006 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injection of various parameters. By assembling portions of SQL code between the...
CVE-2010-4006
CVE-2010-4006 concerns SQL injection in the WSN Links software. The vulnerability exists in search.php, where the parameters namecondition and namesearch can be used to inject SQL, enabling remote commands. Affected versions are < 6.0.1 and < 5.1.51 /
WSN Links SQL Injection
'WSN Links' SQL Injection Vulnerability CVE-2010-4006 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injection of various parameters. By assembling portions of SQL code between the...
'WSN Links' SQL Injection Vulnerability (CVE-2010-4006)
'WSN Links' SQL Injection Vulnerability CVE-2010-4006 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injection of various parameters. By assembling portions of SQL code between the...