Fedora 20 : sagemath-6.1.1-6.fc20 (2014-16667)

Add patch for CVE-2012-4230. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

CVE-2014-4230

CVE-2014-4230 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel UI Framework component Open_UI. The flaw, described as an unspecified vulnerability in Open_UI, enables remote, unauthenticated network attacks that can impact data integrity. The NVD entry lists a CVSS v2 base score...

Camtron CMNC-200 IP Camera ActiveX Buffer Overflow Vulnerability

No description provided by source. Finding 1: Buffer Overflow in ActiveX Control CVE: CVE-2010-4230 The CMNC-200 IP Camera ActiveX control identified by CLSID DD01C8CA-5DA0-4B01-9603-B7194E561D32 is vulnerable to a stack overflow on the first argument of the connect method. The vulnerability can ...

CVE-2012-4230

The bbcode plugin in TinyMCE 3.5.8 does not properly enforce the TinyMCE security policy for the 1 encoding directive and 2 validelements attribute, which allows attackers to conduct cross-site scripting XSS attacks via application-specific vectors, as demonstrated using a textarea element...

CVE-2012-4230

CVE-2012-4230 affects the TinyMCE 3.5.8 bbcode plugin, where the plugin does not properly enforce the security policy for two directives: (1) encoding and (2) valid_elements. This misconfiguration allows attackers to perform cross-site scripting (XSS) via application-specific vectors, demonstrate...

CVE-2013-4230

The mm_webform submodule in Monster Menus (Drupal 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13) does not properly restrict access to webform submissions, allowing remote authenticated users with the “Who can read data submitted to this webform” permission to delete arbitrary submissions vi...

SA-CONTRIB-2013-066 - Monster Menus - Multiple Vulnerabilities

Monster Menus enables you to create granular page permissions, and apply them to a hierarchical page structure. The mmwebform submodule enables you to assign permissions derived from Monster Menus to webform forms. The module doesn't sufficiently filter titles entered into page settings and echoe...

Fedora 17 : asterisk-10.2.1-1.fc17 (2012-4230)

Update to 10.2.1, which fixes 2 security vulnerabilities. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

TWSL2010-006: Multiple Vulnerabilities in Camtron CMNC-200 IP Camera

Trustwave's SpiderLabs Security Advisory TWSL2010-006: Multiple Vulnerabilities in Camtron CMNC-200 IP Camera https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt Published: 2010-11-12 Version: 1.0 Vendors: Camtron http://www.camtron.co.kr/ TecVoz http://www.tecvoz.com.br/ Products:...

CVE-2010-4230

The CVE-2010-4230 issue affects the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera (firmware 1.102A-008) via a stack-based buffer overflow in an installable ActiveX control. The vulnerability lies in the first argument to the connect method of the ActiveX object (CLSID...

CVE-2010-4230

Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to execute arbitrary code via a long string in the first argument to the connect method...

Camtron CMNC-200 IP Camera - ActiveX Buffer Overflow

Finding 1: Buffer Overflow in ActiveX Control CVE: CVE-2010-4230 The CMNC-200 IP Camera ActiveX control identified by CLSID DD01C8CA-5DA0-4B01-9603-B7194E561D32 is vulnerable to a stack overflow on the first argument of the connect method. The vulnerability can be used to set the EIP register,...

Camtron CMNC-200 IP Camera - ActiveX Buffer Overflow

Camtron CMNC-200 IP Camera - ActiveX Buffer Overflow Finding 1: Buffer Overflow in ActiveX Control CVE: CVE-2010-4230 The CMNC-200 IP Camera ActiveX control identified by CLSID DD01C8CA-5DA0-4B01-9603-B7194E561D32 is vulnerable to a stack overflow on the first argument of the connect method. The...

CVE-2010-4230

creationtimestamp| type| source ---|---|--- 2010-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15504...

CVE-2009-4230

Multiple stack-based buffer overflows in src/Task.cc in the FastCGI program in IIPImage Server before 0.9.8 might allow remote attackers to execute arbitrary code via vectors associated with crafted arguments to the 1 RGN::run, 2 JTLS::run, or 3 SHD::run function. NOTE: some of these details are...

CVE-2009-4230

The vulnerability CVE-2009-4230 affects IIPImage Server prior to 0.9.8, specifically in the FastCGI component (src/Task.cc). Multiple stack-based buffer overflows in the RGN::run, JTLS::run, and SHD::run vectors could allow remote attackers to execute arbitrary code. Public references from NVD/Re...

CVE-2008-4230

The CVE-2008-4230 family describes a vulnerability in Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1 where the Passcode Lock allows SMS content to be visible while the emergency-call screen is shown. The underlying issue is the display of SMS messages on the device screen when the e...

CVE-2007-4230

BellaBiblio is affected by a cookie-based privilege escalation where a bellabiblio cookie with the value “administrator” can grant remote admin privileges. The issue’s root cause involves cookie value validation, but this is disputed: several sources state the cookie value must be an MD5 hash rat...

CVE-2006-4230

Summary: CVE-2006-4230 describes multiple PHP remote file inclusion vulnerabilities in the Lizge V.20 Web Portal. The flaw resides in index.php, where an attacker can cause arbitrary PHP code execution by supplying a URL in the (1) lizge or (2) bade parameters. The NVD entry lists a base CVSS v2 ...

CVE-2005-4230

CVE-2005-4230 concerns an SQL injection in poll.php of Link Up Gold 2.5 and earlier, exploitable via the number parameter to allow remote execution of arbitrary SQL commands. The core affected software is Link Up Gold (versions up to 2.5 and older). The cited sources (NVD entry) confirm the vulne...