154 matches found
Memory corruption
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149,...
Memory corruption
Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-4147, CVE-2012-4148, CVE-2012-4149, CVE-2012-4150,...
CVE-2012-4147
Technical details (affected products/versions, root cause, exploit vectors, or fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2010-4147
CVE-2010-4147 affects Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier. The vulnerability is multiple SQL injections exploitable via the User-Agent header to index.php and product-list.php, enabling remote attackers to execute arbitrary SQL commands. Documents do not prov...
FreeBSD Security Advisory FreeBSD-SA-09:16.rtld
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:16.rtld Security Advisory The FreeBSD Project Topic: Improper environment sanitization in rtld1 Category: core Module: rtld Announced: 2009-12-03 Affects:...
CVE-2009-4147
CVE-2009-4147 affects FreeBSD rtld (libexec/rtld-elf/rtld.c) on FreeBSD 7.1, 7.2 and 8.0. The rtld function fails to clear LD * environment variables, allowing a local user to exploit a modified search path to load a Trojan library and escalate privileges (e.g., through setuid/setgid programs). R...
CVE-2009-4147
creationtimestamp| type| source ---|---|--- 2009-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10255 2019-05-20 18:21:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/local/rtldexeclprivesc.rb 2025-02-06 03:13:39+00:00| see...
CVE-2008-4147
Cross-site scripting XSS vulnerability in the Mailsave module 5.x before 5.x-3.3 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an attached file that has a modified Content-Type...
CVE-2008-4147
The CVE-2008-4147 entry affects Drupal’s Mailsave module (5.x before 5.x-3.3 and 6.x before 6.x-1.3). The issue is a Cross‑site Scripting (XSS) vulnerability allowing remote attackers to inject arbitrary script/HTML via an e‑mail message that includes an attached file with a modified Content-Type...
CVE-2008-4147
Cross-site scripting XSS vulnerability in the Mailsave module 5.x before 5.x-3.3 and 6.x before 6.x-1.3, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an attached file that has a modified Content-Type...
CVE-2007-4147
Interspire ArticleLive NX prior to 1.7.1.2 is affected by multiple unspecified vulnerabilities with unknown impact and attack vectors. The connected sources mention potential issues related to AL_SANITIZE and a constructor-related check mechanism, but no concrete exploit details, affected file/en...
ISC BIND < 9.5.0a6 Multiple Vulnerabilities
Binary data 4147.prm...
CVE-2005-4147
The TCLHTTPd component of Lyris ListManager (pre-8.9b) is vulnerable: remote attackers can obtain source code for arbitrary .tml TCL files via a request containing a trailing null byte (%00), with a possible authentication bypass involving a username ending in “@”. Affected product/version: ListM...
MS:E17C01AE-BACC-4147-97AD-51A0708126D2
...