Security update for obs-service-source_validator (important)

obs-service-sourcevalidator was updated to fix one security issue. This security issue was fixed: - CVE-2016-4007: Several maintained source services are vulnerable to code/paramter injection bsc967265. This non-security issue was fixed: - bsc967610: Several occurrences of uninitialized value...

CVE-2016-4007

CVE-2016-4007 affects the obs-service-extract_file package (and related source validator components) via code/parameter injection in service definitions (unzip with illegal options). Public advisories note the issue was fixed by OBS-related updates: openSUSE/SUSE security notices for obs-service-...

CVE-2014-4007

The CVE-2014-4007 entry concerns SAP Upgrade tools for ABAP that contain hardcoded credentials. This root cause enables remote attackers to gain access via unspecified vectors, as described in the NVD entry. The vulnerability is assessed with a Medium base severity (CVSSv2: AV:N/AC:L/Au:N/C:P/I:N...

CVE-2013-4007

Cross-site scripting XSS vulnerability in advsw.php in the Advanced Management Module AMM with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4007

Cross-site scripting XSS vulnerability in advsw.php in the Advanced Management Module AMM with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4007

The CVE-2013-4007 entry concerns a Cross-Site Scripting (XSS) vulnerability in IBM BladeCenter’s Advanced Management Module (AMM), specifically in the adv_sw.php page. Affected firmware versions are BBET before BBET64G and BPET before BPET64G. The underlying issue allows a remote attacker to exec...

CVE-2012-4007

The CVE-2012-4007 entry concerns mixi for Android prior to version 4.3.0. A crafted Android application can exploit the app’s handling of friends’ comments stored on the device’s SD card, allowing other apps to read potentially sensitive information. Impact is disclosure of comments stored on SD ...

CVE-2011-4007

Cisco IOS 15.0/15.1 and IOS XE 3.x are affected by CVE-2011-4007 due to improper handling of the "set mpls experimental imposition" command. The issue allows remote attackers to trigger a denial-of-service (device crash) through network traffic that triggers fragmentation or reassembly, per Bug I...

CVE-2010-4007

Oracle Mojarra is affected by CVE-2010-4007 due to an encrypted View State without a Message Authentication Code (MAC), enabling a padding oracle attack to modify the View State remotely. This weakness is reiterated across multiple sources (NVD, Red Hat advisory, and other feeds) and is tied to M...

CVE-2010-4007

Oracle Mojarra uses an encrypted View State without a Message Authentication Code MAC, which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057...

Fedora Update for openttd FEDORA-2010-11450

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 12 : openttd-0.7.5-1.fc12 (2010-0135)

CVE-2009-4007 game server remote crash http://www.openttd.org/en/news/112 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Update for openttd FEDORA-2010-7885

Check for the Version of openttd OpenVAS Vulnerability Test Fedora Update for openttd FEDORA-2010-7885 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for openttd FEDORA-2010-7800

Check for the Version of openttd OpenVAS Vulnerability Test Fedora Update for openttd FEDORA-2010-7800 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for openttd FEDORA-2010-7800

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for openttd FEDORA-2010-0144

Check for the Version of openttd OpenVAS Vulnerability Test Fedora Update for openttd FEDORA-2010-0144 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Security fix for the ALT Linux 5 package openttd version 0.7.5-alt1

Jan. 27, 2010 Anton Farygin 0.7.5-alt1 - new version CVE-2009-4007 fixed...

DEBIAN-CVE-2009-4007

Unspecified vulnerability in the NormaliseTrainConsist function in src/traincmd.cpp in OpenTTD before 0.7.5-RC1 allows remote attackers to cause a denial of service daemon crash via certain game actions involving a wagon and a dual-headed engine...

CVE-2009-4007

Technical details about CVE-2009-4007 are not provided in the connected documents. Public specifics (vulnerable component/version/root cause/impact) are not available here; monitor for updates.

CVE-2008-4007

CVE-2008-4007 concerns the PeopleSoft Enterprise Components component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9.18. The description indicates an unspecified vulnerability that allows remote authenticated users to affect confidentiality, integrity, and availability via unkno...