75 matches found
CVE-2016-4090
Technical details about CVE-2016-4090 are not publicly available in the provided connected documents. Monitor for updates from the sources referenced in the Initial Description; no explicit vulnerability specifics (exploit vectors, impacted versions, or fixes) are given here.
CVE-2014-4090
Microsoft Internet Explorer 6–11 is affected by CVE-2014-4090 via memory corruption caused by use-after-free flaws in IE, allowing remote code execution (or memory corruption leading to DoS) when a user visits a crafted page. The connected ZDI advisories for the same era describe multiple use-aft...
Microsoft Internet Explorer CVE-2014-4090 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...
CVE-2012-4090
CVE-2012-4090 affects Cisco NX-OS Software on Nexus 7000 devices. The vulnerability arises from improper sanitization of configuration files that are viewable by users with the network-operator role via the management interface. As a result, remote authenticated users could obtain sensitive confi...
CVE-2010-4090
Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
CVE-2010-4090
Summary of CVE-2010-4090: Adobe Shockwave Player prior to version 11.5.9.615 is vulnerable to memory corruption that can lead to arbitrary code execution or denial of service via unspecified vectors. The affected component is the Shockwave Player plugin; vulnerability details consistently refer t...
Shockwave Player < 11.5.9.615
The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.615. Such versions are potentially affected by the following issues : - A memory corruption issue exists that could lead to code execution. Note that there are reports this issue is being exploited ...
CVE-2009-4090
CVE-2009-4090 affects Telepark.wiki prior to or equal to 2.4.23. The flaw is an unrestricted file upload in ajax/addComment.php that allows an attacker to upload a file with a NULL byte in the name, enabling remote code execution. Multiple connected sources (NVD entry, OpenVAS NASL, CVE mirrors) ...
CVE-2008-4090
CVE-2008-4090 : Affects PHP Coupon Script 4.0. The vulnerability is in index.php and allows SQL injection via the id parameter in an addtocart action, enabling remote arbitrary SQL execution.
CVE-2008-4090
creationtimestamp| type| source ---|---|--- 2008-09-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6348...
CVE-2007-4090
Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the URI to inc/lib/screen.php or 2 the title parameter to post.php. NOTE: vector 2 might overlap CVE-2006-6283. NOTE: the provenance of this information is...
CVE-2007-4090
Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via 1 the URI to inc/lib/screen.php or 2 the title parameter to post.php. NOTE: vector 2 might overlap CVE-2006-6283. NOTE: the provenance of this information is...
CVE-2007-4090
CVE-2007-4090 describes multiple XSS vulnerabilities in Vikingboard 0.1.2. The flaws allow remote attackers to inject script/HTML via (1) the URI to inc/lib/screen.php and (2) the title parameter to post.php; vector 2 may overlap CVE-2006-6283. The provenance is noted as unknown and information i...
CVE-2006-4090
CVE-2006-4090 describes a cross-site scripting (XSS) vulnerability in Webligo BlogHoster 2.2. The issue arises in the comment posting flow, likely involving the nickname parameter in previewcomment.php and the From: part of the comment post, allowing remote attackers to inject arbitrary web scrip...