173 matches found
SuSE 11.1 Security Update : GnuTLS (SAT Patch Number 5684)
This update for GnuTLS provides the following fixes : - Fix typo in patch for gnutls-cli that can cause a crash. bnc659907 - Fix Buffer overflow in the gnutlssessiongetdata function in lib/gnutlssession.c , when used on a client that performs nonstandard session resumption, allows remote TLS...
BELL-CVE-2011-4128 CVE-2011-4128 does not affect BellSoft software
Bulletin has no description...
CVE-2011-4128
CVE-2011-4128 affects GnuTLS: a buffer overflow in gnutls_session_get_data in lib/gnutls_session.c can be triggered when a client uses nonstandard session resumption. A remote TLS server can cause an application crash (DoS) by sending a large SessionTicket. Affected are GnuTLS 2.12.x prior to 2.1...
CVE-2009-4128
GNU GRand Unified Bootloader GRUB 2 1.97 only compares the submitted portion of a password with the actual password, which makes it easier for physically proximate attackers to conduct brute force attacks and bypass authentication by submitting a password whose length is 1...
CVE-2009-4128
CVE-2009-4128 affects GRUB 2 (1.97) and allows authentication bypass by feeding a 1-character password because GRUB 2 did not properly validate the entire password. Affected systems could be exploited by an attacker with physical access to perform a local brute-force attack. Ubuntu's USN-868-1 an...
CVE-2008-4128
CVE-2008-4128 concerns Cisco IOS 12.4 on the 871 ISR, where multiple CSRF vulnerabilities in the HTTP Administration component can allow remote command execution via the show privilege command to /level/15/exec/- and the alias exec command to /level/15/exec/-/configure/http. Connected sources con...
CVE-2008-4128
Multiple cross-site request forgery CSRF vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attackers to execute arbitrary commands via 1 a certain "show privilege" command to the /level/15/exec/- URI, and 2 a certain "alias...
CVE-2008-4128
creationtimestamp| type| source ---|---|--- 2008-09-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6476 2026-07-13 17:29:30+00:00| seen| https://bsky.app/profile/cvesentinel.bsky.social/post/3mqk7rgvkgi27 2026-07-13 17:36:46+00:00| seen|...
CVE-2007-4128
SQL injection vulnerability in index.php in the Firestorm Technologies GMaps comgmaps 1.00 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mapId parameter in a viewmap action...
CVE-2006-4128
The CVE-2006-4128 issue affects Symantec VERITAS Backup Exec products (Backup Exec for Windows Server and Remote Agent, Backup Exec Continuous Protection Server Remote Agent, and related Netware/Remote Agents) with multiple heap-based buffer overflows exposed via crafted RPC messages. The vulnera...
CVE-2005-4128
CVE-2005-4128 is a duplicate of CVE-2005-4092. The connected advisories describe Apple QuickTime/QuickTime Player heap memory corruption vulnerabilities in handling various image/media formats (GIF, TGA, TIFF, STSD) that may allow remote code execution or denial of service. The issues were addres...
