122 matches found
CVE-2016-4056
Cross-site scripting XSS vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a bookmark...
CVE-2016-4056
Cross-site scripting XSS vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a bookmark...
CVE-2016-4056
TYPO3 Backend component (TYPO3 6.2.x before 6.2.19) is affected by a Cross-site scripting (XSS) vulnerability. An attacker can inject arbitrary script/HTML via the module parameter when creating a bookmark, enabling script execution in an authenticated user’s browser. The issue stems from insuffi...
VCE3570: VCE Vision(TM) Intelligent Operations Cryptographic and Cleartext Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VCE3570: VCE VisionTM Intelligent Operations Cryptographic and Cleartext Vulnerabilities CVE Identifier: CVE-2015-4056, CVE-2015-4057 Severity Rating: CVSSv2 Base Score: See below for individual scores for each CVE Affected products: VCE Vision...
Microsoft Internet Explorer Multiple Vulnerabilities (2976627)
This host is missing a critical security update according to Microsoft Bulletin MS14-051. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2014-4056
Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...
CVE-2014-4056
Microsoft Internet Explorer 7–10 is affected by CVE-2014-4056, a memory-corruption/Use-After-Free vulnerability in IE that allows remote code execution when a user visits a crafted webpage. The issue is described across multiple sources as a memory corruption in IE (with ZDI-14-283 identifying a ...
CVE-2013-4056
Cross-site request forgery CSRF vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users...
CVE-2013-4056
Cross-site request forgery CSRF vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users...
CVE-2012-4056
The CVE-2012-4056 entry concerns a SQL injection in index2.php of the Uiga Personal Portal, exploitable via the p parameter. The vulnerability, described in the NVD entry, could let remote attackers execute arbitrary SQL commands, with a network-based, low-complexity attack that requires no authe...
IBM Solid Database 6.5 < 6.5.0.8 Multiple Denial of Service Vulnerabilities
Binary data 6340.prm...
CVE-2011-4056
The connected documents provide concrete details: CVE-2011-4056 affects Siemens Tecnomatix FactoryLink through the ActBar.ocx ActiveX control. Versions affected include 6.6.1 (6.6 SP1), 7.5.217 (7.5 SP2), and 8.0.2.54. The vulnerability allows remote attackers to create or overwrite arbitrary fil...
IBM solidDB Packets Processing Denial of Service Vulnerabilities
IBM solidDB is prone to multiple Denial of Service vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:soliddb";...
CVE-2010-4056
IBM solidDB 6.5.0.3 and earlier are affected by CVE-2010-4056. The issue occurs when processing a TCP packet on port 1315 containing a single integer field, causing a NULL pointer dereference and daemon crash (remote denial of service). Multiple vulnerability feeds (NVD, OpenVAS, Nessus, etc.) co...
CVE-2009-4056
The CVE-2009-4056 entry concerns Betsy CMS 3.5, where a directory traversal flaw exists in admin/popup.php. The vulnerability allows remote attackers to cause local file inclusion and arbitrary code execution by supplying a .. (dot dot) sequence in the popup parameter. Affected component: Betsy C...
CVE-2009-4056
creationtimestamp| type| source ---|---|--- 2009-11-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10189...
CVE-2008-4056
CVE-2008-4056 describes a Cross-site scripting (XSS) vulnerability in the admin/login.php of Matterdaddy Market 1.1 . The issue allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Multiple connected sources corroborate the description. The NVD entry lists a CVSSv...
CVE-2008-4056
creationtimestamp| type| source ---|---|--- 2008-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32299...
CVE-2007-4056
CVE-2007-4056 affects Prozilla Adult Directory (directory.php). The vulnerability is an SQL injection in the list action via the cat_id parameter, enabling remote attackers to execute arbitrary SQL commands. The connected documents confirm the vulnerable component and root cause but do not provid...