110 matches found
Fedora 12 : kernel-2.6.32.26-175.fc12 (2010-18432)
'Update to stable release 2.6.32.26, includes many CVE fixes documented in the upstream changelogs plus CVE-2010-3880, CVE-2010-4072, CVE-2010-4073, and a bunch of kernel stack leakages in the tty and serial drivers.' Note that Tenable Network Security has extracted the preceding description bloc...
BELL-CVE-2010-4072 CVE-2010-4072 does not affect BellSoft software
Bulletin has no description...
CVE-2010-4072
CVE-2010-4072 affects the Linux kernel: the copy_shmid_to_user function in ipc/shm.c (pre-2.6.37-rc1) does not initialize a certain structure, enabling local users to leak potentially sensitive information from kernel stack memory via the shmctl interface and the old shm interface. Affected produ...
CVE-2009-4072
Opera 9.x/10.x vulnerable to CVE-2009-4072 (and related CVEs) as part of a set of high‑severity vulnerabilities. Affected product: Opera Web Browser (Windows/Linux). Issue type: Information Disclosure and unspecified vulnerabilities with potential for arbitrary code execution or DoS. Root cause/i...
CVE-2008-4072
CVE-2008-4072 affects phsBlog 0.2 via SQL injection in index.php, exploitable through the sid parameter (pickup action) or the sql_cid parameter. The root cause, as stated, is unsafe SQL construction allowing remote attackers to insert arbitrary SQL. The connected documents do not provide concret...
CVE-2008-4072
creationtimestamp| type| source ---|---|--- 2008-09-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6431...
CVE-2007-4072
Webbler CMS before 3.1.6 exposes the full installation path inside HTML comments in certain documents, enabling remote attackers to obtain sensitive information by viewing the HTML source (e.g., the index.php page). The affected component is Webbler CMS, with the root cause being path disclosure ...
CVE-2006-4072
Multiple SQL injection vulnerabilities affect Club-Nuke [XP] 2.0 LCID 2048. The flaws allow remote attackers to execute arbitrary SQL commands via the (1) haber_id parameter to haber_detay.asp and (2) menu_id parameter to menu.asp. Root cause: unsafely constructed SQL queries leading to injection...
CVE-2005-4072
The CVE describes a cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier, where an attacker can inject arbitrary script via the Words parameter in search_forums.cfm used in the “Search For:” field. The available records confirm the affected software and the inp...