96 matches found
CVE-2013-4237
sysdeps/posix/readdirr.c in the GNU C Library aka glibc or libc6 2.18 and earlier allows context-dependent attackers to cause a denial of service out-of-bounds write and crash or possibly execute arbitrary code via a crafted 1 NTFS or 2 CIFS image...
CVE-2013-4237
sysdeps/posix/readdirr.c in the GNU C Library aka glibc or libc6 2.18 and earlier allows context-dependent attackers to cause a denial of service out-of-bounds write and crash or possibly execute arbitrary code via a crafted 1 NTFS or 2 CIFS image...
CVE-2013-4237
CVE-2013-4237 affects glibc (GNU C Library) 2.18 and earlier, in sysdeps/posix/readdir_r.c. A context-dependent attacker could trigger an out-of-bounds write in readdir_r via a crafted NTFS or CIFS image, causing a denial of service or potentially executing arbitrary code. Exploitation details ar...
CVE-2013-4237
sysdeps/posix/readdirr.c in the GNU C Library aka glibc or libc6 2.18 and earlier allows context-dependent attackers to cause a denial of service out-of-bounds write and crash or possibly execute arbitrary code via a crafted 1 NTFS or 2 CIFS image...
Fedora Update for glibc FEDORA-2013-17475
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for glibc FEDORA-2013-15316
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for glibc FEDORA-2013-15053
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TCExam Edit SQL Injection
/--------------------------- | TCExam Edit SQL Injection | ---------------------------/ Summary ======= TCExam 11.3.007 is prone to a SQL injection flaw located in tceeditanswer.php and tceeditquestion.php. These files pass a 'subjectmoduleid' parameter into a SQL statement without satisfactory...
CVE-2011-4237
The CVE-2011-4237 issue is a CRLF injection/HTTP response-splitting vulnerability in CiscoWorks Common Services 4.0 used with Cisco Prime LAN Management Solution and related products. Root cause: improper sanitization of user input in Autologin.jsp, enabling an unauthenticated remote attacker to ...
CVE-2009-4237
Multiple cross-site scripting XSS vulnerabilities in TestLink before 1.8.5 allow remote attackers to inject arbitrary web script or HTML via 1 the req parameter to login.php, and allow remote authenticated users to inject arbitrary web script or HTML via 2 the key parameter to...
CVE-2009-4237
TestLink (before version 1.8.5) is affected by multiple XSS and SQL injection vulnerabilities. The XSS flaws affect inputs across several scripts (e.g., login.php req parameter; lib/general/staticPage.php key; lib/attachments/attachmentupload.php tableName; lib/events/eventviewer.php startDate, e...
CVE-2008-4237
CVE-2008-4237 is a Mac OS X 10.5.x vulnerability where the Managed Client misidentifies the system during per-host configuration installation, causing per-host settings (notably the screen saver lock) to not be applied. The issue is fixed by Mac OS X 10.5.6 Update / Security Update 2008-008. Refe...
CVE-2007-4237
CVE-2007-4237 affects IBM AIX 5.2 and 5.3, specifically the devices.common.IBM.atm.rte (atm subset in arp). The underlying issue is a buffer overflow that could allow local users to gain root privileges. Public exploit details are not provided in the documents. Connected sources indicate related ...
CVE-2006-4237
CVE-2006-4237 affects Invisionix Roaming System Remote (IRSR) up to version 0.2 and earlier, where pageheaderdefault.inc.php is vulnerable to a PHP remote file inclusion via the _sysSessionPath parameter, enabling remote code execution. Affected component/file: pageheaderdefault.inc.php. Root cau...
CVE-2005-4237
CVE-2005-4237 affects MySQL Auction 3.0 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in the search functionality, with parameters in the SearchZoom module (potentially the keyword parameter) allowing remote injection of arbitrary script/HTML. Exploitability and impact are d...