Ubuntu: Security Advisory (USN-1636-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-4213

The CVE-2012-4213 issue is a concrete use-after-free vulnerability in Mozilla codepath: nsEditor::FindNextLeafNode affects Firefox and related products. Affected components per the initial description are Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14, with remote...

CVE-2012-4213

Use-after-free vulnerability in the nsEditor::FindNextLeafNode function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via unspecified vectors...

CVE-2011-4213

The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent use of the os module, which allows local users to bypass intended access restrictions and execute arbitrary commands via a fileblobstorage.os reference within the code parameter to...

CVE-2011-4213

The CVE-2011-4213 issue affects the Google App Engine Python SDK prior to 1.5.4, where the sandbox/Interactive Console path _ah/admin/interactive/execute is vulnerable to CSRF. The vulnerability allows remote attackers to hijack administrator authentication and execute arbitrary Python code via t...

CVE-2010-4213

The CVE-2010-4213 entry concerns the Bank of America Android app version 2.12, where a security question’s answer is stored in cleartext. This storage allows physically proximate attackers to read sensitive data from the application data. The available connected documents confirm the affected sof...

CVE-2007-4213

CVE-2007-4213 affects Palm OS on Treo smartphones (650, 680, 700p, 755p). A remote attacker can cause a denial of service (device reset/hang) by sending a flood of large ICMP echo requests to the device, typically via the data network. The issue is described in Symantec’s SYMSA-2007-007 advisory,...

CVE-2006-4213

PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2006-4213

CVE-2006-4213 describes a PHP remote file inclusion vulnerability in David Kent Norman Thatware 0.4.6 (and possibly earlier). The root_path parameter can be set to an attacker-controlled URL, enabling remote PHP code execution. The connected documents confirm the root cause and impact as partial ...

CVE-2005-4213

CVE-2005-4213 describes a SQL injection in mod.php of phpCOIN 1.2.2 exploitable via the phpcoinsessid cookie, allowing remote SQL commands. This affects phpCOIN 1.2.2 prior to any fixes; remediation is not detailed in the provided documents, but related Nessus entries reference a 1.2.2 fix releas...