442 matches found
CVE-2008-4034
CVE-2008-4034 entry is rejected/not used and does not represent an active vulnerability.
CVE-2015-4034
Affected software/impact : Samsung Galaxy S5's com.absolute.android.persistence.MethodSpec class is vulnerable to remote code execution via crafted Parcelable objects. The root cause is in the createFromParcel deserialization flow, where dynamic class loading is performed without restricting the ...
CVE-2014-4034
CVE-2014-4034 concerns ZeroCMS 1.0, where a SQL injection flaw exists in zero_view_article.php via the article_id parameter. The vulnerability allows remote attackers to manipulate SQL queries and potentially access or alter data in the backend. The issue is documented with a base CVSS v2 score o...
CVE-2014-4034
creationtimestamp| type| source ---|---|--- 2014-06-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33702...
Modernbill config.php DIR Parameter PHP Code Execution - Ver2 (CVE-2006-4034)
A code execution vulnerability has been reported in ModernGigabyte ModernBill. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2013-4034
IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related ...
CVE-2013-4034
IBM Cognos BI is vulnerable to an XML External Entity (XXE) issue (CVE-2013-4034). Affected: IBM Cognos BI 8.4.1 before IF3; 10.1.0 before IF4; 10.1.1 before IF4; 10.2.0 before IF4; 10.2.1 before IF2; 10.2.1.1 before IF1. Description: remote authenticated users can read arbitrary files via an XML...
CVE-2013-4034
creationtimestamp| type| source ---|---|--- 2013-10-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38825...
Multiple vulnerabilities in PBBoard
Advisory ID: HTB23101 Product: PBBoard Vendor: www.pbboard.com Vulnerable Versions: 2.1.4 and probably prior Tested Version: 2.1.4 Vendor Notification: July 18, 2012 Public Disclosure: August 8, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Improper Access Contro...
CVE-2012-4034
PBBoard 2.1.4 (and likely earlier) is affected by multiple SQL injection vulnerabilities disclosed for CVE-2012-4034. The flaws arise from unsanitised input in various POST/GET parameters processed by index.php (including username, email, password, section, section_id, member_id, and subjectid) t...
PBBoard 2.1.4 SQL Injection / Improper Authentication / Broken Access Control
Exploit for php platform in category web applications Vendor: www.pbboard.com Vulnerable Versions: 2.1.4 and probably prior Tested Version: 2.1.4 Vendor Notification: July 18, 2012 Public Disclosure: August 8, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Imprope...
PBBoard 2.1.4 SQL Injection / Improper Authentication / Broken Access Control
Advisory ID: HTB23101 Product: PBBoard Vendor: www.pbboard.com Vulnerable Versions: 2.1.4 and probably prior Tested Version: 2.1.4 Vendor Notification: July 18, 2012 Public Disclosure: August 8, 2012 Vulnerability Type: SQL Injection CWE-89, Improper Authentication CWE-287, Improper Access Contro...
CVE-2012-4034
creationtimestamp| type| source ---|---|--- 2012-08-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37614...
CVE-2011-4034
The CVE-2011-4034 issue involves a buffer overflow in the third‑party TeeChart ActiveX control used by Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADA Reports 4.10 and earlier. The vulnerability potentially allows remote attackers to execute ...
Google Chrome multiple vulnerabilities - October 10(Windows)
The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnoct10win.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome multiple vulnerabilities - October 10Windows Authors: Madhuri D Copyright: Copyright c 2010 Greenbone...
CVE-2010-4034
Summary: CVE-2010-4034 affects Google Chrome before 7.0.517.41. The vulnerability arises from improper handling of forms in the browser, enabling remote attackers to cause a denial of service (application crash) or possibly other unspecified impact via a crafted HTML document. Affected software: ...
SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 6768)
The following bugs have been fixed : An unprivileged, authenticated PostgreSQL user could create a table which references functions with malicious content. Maintenance operations carried out be the database superuser could execute such functions. CVE-2009-4136 Embedded null bytes in the common na...
openSUSE Security Update : postgresql (postgresql-1773)
An unprivileged, authenticated PostgreSQL user could create a table which references functions with malicious content. Maintenance operations carried out be the database superuser could execute such functions CVE-2009-4136. Embedded null bytes in the common name of SSL certificates could bypass...
SuSE9 Security Update : PostgreSQL (YOU Patch Number 12571)
The following bugs have been fixed : - An unprivileged, authenticated PostgreSQL user could create a table which references functions with malicious content. Maintenance operations carried out be the database superuser could execute such functions. CVE-2009-4136 - Embedded null bytes in the commo...