97 matches found
CVE-2014-4236
CVE-2014-4236 affects Oracle Database Server 11.2.0.4 and 12.1.0.1, with an unspecified vulnerability in the RDBMS Core component. The impact is partial confidentiality, partial integrity, and partial availability. Exploitation requires remote authenticated access, and the vectors are not detaile...
Moderate: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update
An updated rhev-hypervisor6 package that fixes three security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
CVE-2013-4236
CVE-2013-4236 affects VDSM in Red Hat Enterprise Virtualization 3 and 3.2. The issue stems from an incomplete fix for CVE-2013-0167 and can allow a privileged guest user to make the host running the guest unavailable to the management server via invalid XML characters in a guest agent response. P...
CVE-2012-4236
The vulnerability CVE-2012-4236 affects Total Shop UK eCommerce Open Source (CodeIgniter-based) before version 2.1.2_p1. Root cause: the refresh_page function in /application/modules/_main/views/_top.php writes the entire URL (including PATH_INFO) to Javascript without sufficient sanitisation, en...
CVE-2012-4236
creationtimestamp| type| source ---|---|--- 2012-08-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37632...
SuSE 11.1 Security Update : logwatch (SAT Patch Number 4236)
Shell meta characters in log file names could lead to execution of arbitrary code. CVE-2011-1018 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...
CVE-2010-4236
CVE-2010-4236 describes an untrusted search path vulnerability in IBM OmniFind Enterprise Edition before 9.1 via estaskwrapper, where ES_LIBRARY_PATH and PATH are used during execution of estasklight to escalate privileges locally. The affected component is estaskwrapper/estasklight and the root ...
Mac OS X 10.5.6 Update / Mac OS X Security Update 2008-008
The remote host is missing Mac OS X 10.5.6 Update / Mac OS X Security Update 2008-008. One or more of the following components are affected: ATS BOM CoreGraphics CoreServices CoreTypes Flash Player Plug-in Kernel Libsystem Managed Client networkcmds Podcast Producer UDF OpenVAS Vulnerability Test...
CVE-2009-4236
EC-CUBE information disclosure vulnerability (CVE-2009-4236) affects EC-CUBE Ver2 Version 2.4.0 RC1 through 2.4.1 and EC-CUBE Community Edition r18068 through r18428. The issue enables remote attackers to obtain sensitive customer data via unknown vectors related to sessions. Root cause is descri...
CVE-2008-4236
CVE-2008-4236 affects Apple Type Services (ATS) in Mac OS X 10.5 before 10.5.6. A crafted embedded font in a PDF file can cause a denial of service (infinite loop) when processed by ATS. The issue is addressed in Mac OS X 10.5.6 Security Update (and related updates) by adding validation for embed...
About the security content of Security Update 2008-008 / Mac OS X v10.5.6
About the security content of Security Update 2008-008 / Mac OS X v10.5.6 Last Modified: December 15, 2008 Article: HT3338 Summary This document describes the security content of Security Update 2008-008 / Mac OS X v10.5.6, which can be downloaded and installed via Software Update preferences, or...
AIX 5.2 TL 10 : bos.rte.printers (U809751)
The remote host is missing AIX PTF U809751, which is related to the security of the package bos.rte.printers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U809751. The text itself is copyright C...
CVE-2007-4236
CVE-2007-4236 describes a buffer overflow in the LPD component of the bos.rte.printers package on IBM AIX 5.2 and 5.3 that can allow local users with printq group privileges to obtain root privileges. The vulnerability affects the lpd/bos.rte.printers stack/heap handling as described in the CVE e...
CVE-2006-4236
The CVE-2006-4236 entry describes multiple PHP remote file inclusion vulnerabilities in POWERGAP. An attacker can craft a URL using the shopid parameter (to s01.php, s02.php, s03.php, or s04.php) or manipulate PATH_INFO after shopid= or sid= to cause arbitrary PHP code execution on affected POWER...
CVE-2005-4236
CVE-2005-4236 concerns an XSS vulnerability in the CKGOLD package, specifically in the search.php component. The issue allows remote attackers to inject arbitrary web script or HTML through the search parameters, enabling cross-site scripting. The available connected records confirm the flaw as a...
