CVE-2009-4227

creationtimestamp| type| source ---|---|--- 2009-12-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33388...

RedHat Update for mysql RHSA-2008:0364-01

Check for the Version of mysql OpenVAS Vulnerability Test RedHat Update for mysql RHSA-2008:0364-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

CVE-2008-4227

Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1 change the PPTP VPN encryption level to a lower one, making it easier for remote attackers to decrypt traffic or hijack connections. Affected software: Apple iPhone OS 1.0–2.1 and iPod touch OS 1.1–2.1. Root cause: reduction in PPTP enc...

SuSE 10 Security Update : mysql (ZYPP Patch Number 2073)

This update of mysql fixes several security vulnerabilities. CVE-2006-4031 / CVE-2006-4226 / CVE-2006-4227 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29524...

Ubuntu 6.06 LTS : mysql-dfsg-5.0 vulnerabilities (USN-338-1)

Dmitri Lenev discovered that arguments of setuid SQL functions were evaluated in the security context of the functions' definer instead of its caller. An authenticated user with the privilege to call such a function could exploit this to execute arbitrary statements with the privileges of the...

openSUSE 10 Security Update : mysql (mysql-2075)

This update of mysql fixes several security vulnerabilities. CVE-2006-4031,CVE-2006-4226,CVE-2006-4227 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mysql-2075. The text description of this...

CVE-2007-4227

Microsoft Windows Explorer explorer.exe allows user-assisted remote attackers to cause a denial of service via a certain JPG file, as demonstrated by something.jpg. NOTE: this issue might be related to CVE-2007-3958...

CVE-2007-4227

Microsoft Windows Explorer (explorer.exe) is affected by CVE-2007-4227, a user-assisted DoS vulnerability triggered by processing a crafted image file (e.g., something.jpg). The connected documents also reference CVE-2007-3958 (GIF file) as related, indicating a similar DoS vector in explorer.exe...

FreeBSD : mysql -- database suid privilege escalation (a9c51caf-6603-11db-ab90-000e35fd8194)

Dmitri Lenev reports a privilege escalation in MySQL. MySQL evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote and local authenticated users to gain privileges through a routine that has been made available...

USN-338-1: MySQL vulnerabilities

Dmitri Lenev discovered that arguments of setuid SQL functions were evaluated in the security context of the functions' definer instead of its caller. An authenticated user with the privilege to call such a function could exploit this to execute arbitrary statements with the privileges of the...

CVE-2006-4227

CVE-2006-4227 affects MySQL premade prior to 5.0.25 and 5.1 prior to 5.1.12. The flaw lets arguments to suid routines be evaluated in the definer’s security context rather than the caller, enabling remote authenticated users to gain privileges through a routine granted with EXECUTE. Mitigations/p...

CVE-2006-0220

Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 5.3 through 6.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 the day parameter in calendar.php and 2 the input form in search.php. NOTE: the provenance of this information is unknown; the details are obtained...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 5.3 through 6.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 the day parameter in calendar.php and 2 the input form in search.php. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2005-4227

CVE-2005-4227 affects DCP-Portal 6.1.1 with multiple potential SQL injection vectors. The vulnerability list covers parameters in advertiser.php, announcement.php, calendar.php, contents.php, forums.php, go.php, golink.php, inbox.php, index.php, informer.php, news.php, rate.php, search.php, and u...