Vesta Control Panel 0.9.8 - OS Command Injection

Advisory ID: HTB23261 Product: Vesta Control Panel Vendor: http://vestacp.com Vulnerable Versions: 0.9.8 and probably prior Tested Version: 0.9.8 Advisory Publication: May 20, 2015 without technical details Vendor Notification: May 20, 2015 Vendor Patch: June 3, 2015 Public Disclosure: June 17,...

CVE-2015-4117

creationtimestamp| type| source ---|---|--- 2015-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37369...

Vesta Control Panel 0.9.8 OS Command Injection Vulnerability

Vesta Control Panel version 0.9.8 suffers from an OS command injection vulnerability. Product: Vesta Control Panel Vendor: http://vestacp.com Vulnerable Versions: 0.9.8 and probably prior Tested Version: 0.9.8 Advisory Publication: May 20, 2015 without technical details Vendor Notification: May 2...

Vesta Control Panel 0.9.8 OS Command Injection

Advisory ID: HTB23261 Product: Vesta Control Panel Vendor: http://vestacp.com Vulnerable Versions: 0.9.8 and probably prior Tested Version: 0.9.8 Advisory Publication: May 20, 2015 without technical details Vendor Notification: May 20, 2015 Vendor Patch: June 3, 2015 Public Disclosure: June 17,...

CVE-2014-4117

CVE-2014-4117 affects Microsoft Office and related components (Word 2007/2010, Office 2010, Office for Mac 2011, Word Web Apps, SharePoint) where remote code execution is possible via crafted Word document properties. Root cause: improper handling/parsing of Word file format elements allows arbit...

Microsoft Office Word Remote Code Execution Vulnerability (3000434)

This host is missing an important security update according to Microsoft Bulletin MS14-061. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Web Apps Memory Corruption Vulnerability (3000434)

This host is missing an important security update according to Microsoft Bulletin MS14-061. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

MS14-061: Vulnerability in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (3000434)

The remote Mac OS X host is running a version of Microsoft Word that is affected by a remote code execution vulnerability due to a flaw in parsing Word documents. This vulnerability can be triggered by tricking a user into opening a specially crafted Word document. TRUSTED...

MS14-061: Vulnerability in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (3000434)

The remote Windows host has a version of Microsoft Office, Microsoft Word, Office Compatibility Pack, SharePoint Server, or Microsoft Office Web Apps that is affected by remote code execution vulnerability due to a flaw in parsing Word documents. This vulnerability can be triggered by tricking a...

Microsoft Word Memory Corruption (MS14-061: CVE-2014-4117)

A remote code execution vulnerability has been reported in Microsoft Word. The vulnerability is caused when Microsoft Word does not properly handle objects in memory while parsing specially crafted Office files. A remote attacker can exploit this issue by enticing a user to open a specially craft...

CVE-2012-4117

The CVE-2012-4117 issue concerns Cisco UCS Fabric Interconnect, where the server SSL certificate is not properly verified. This allows a man-in-the-middle attacker to watch or modify SSL KVM video-channel traffic via a crafted certificate. The vulnerability is tied to Bug ID CSCtr73033. Cisco’s a...

CVE-2013-4117

The WordPress plugin Category Grid View Gallery version 2.3.1 contains a cross-site scripting (XSS) vulnerability in includes/CatGridPost.php that can be triggered via the ID parameter. The underlying issue is insufficient input validation allowing arbitrary script/HTML to be injected into a user...

CVE-2013-4117

creationtimestamp| type| source ---|---|--- 2013-07-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38625...

Adobe Dreamweaver CS4 - v10.0 Build 4117 DLL Hijacking (mfc80esn.dll)

Exploit for windows platform in category local exploits / ============================================================================ Adobe Dreamweaver CS4 - v10.0 Build 4117 DLL Hijacking Exploit mfc80esn.dll ============================================================================= $ Progra...

Adobe Dreamweaver CS4 DLL Hijacking Exploit (ibfs32.dll)

Exploit for windows platform in category local exploits ======================================================== Adobe Dreamweaver CS4 DLL Hijacking Exploit ibfs32.dll ======================================================== / Exploit Title: Adobe Dreamweaver CS4 DLL Hijacking Exploit ibfs32.dll...

Adobe Dreamweaver CS4 - 'ibfs32.dll' DLL Hijacking

/ Exploit Title: Adobe Dreamweaver CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: 10.0 Build 4117 Tested on: Windows 7 Ultimate x86 Vulnerable extensions: .asp .asa. aspx .php .php5 .cfm .tpl .asr .jsp etc Greetz:...

CVE-2009-4117

Concretely affected: MuPDF before commit 20091125231942, specifically within pdf_shade4.c, with SumatraPDF prior to 1.0.1. The issue involves multiple stack-based buffer overflows triggered by a /Decode array for certain shading types that are not correctly handled by pdf_loadtype4shade, pdf_load...

CVE-2009-4117

creationtimestamp| type| source ---|---|--- 2009-11-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10244...

CVE-2008-4117

The CVE-2008-4117 entry concerns Sun Management Center (SunMC) PRM module, affecting version 3.6.1 and 4.0, with an unspecified vulnerability that can cause a denial of service via memory consumption. The connected records confirm affected software (SunMC PRM), but do not reveal concrete exploita...

CVE-2007-4117

Affected software: phpWebFileManager 0.5. The issue is described as a PHP remote file inclusion vulnerability in index.php via the PN_PathPrefix parameter, allowing remote code execution. The underlying cause is the handling of PN_PathPrefix in the index.php file, with the note that a reliable th...