97 matches found
CVE-2013-4271
The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221...
CVE-2013-4271
The Restlet framework vulnerability CVE-2013-4271 affects the ObjectRepresentation class in Restlet before 2.1.4. The issue arises when deserializing data from untrusted sources, using Java XMLDecoder, which can lead to remote code execution if an attacker provides a crafted serialized object. Th...
CVE-2013-4271
The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221...
CVE-2012-4271
The CVE-2012-4271 entry describes multiple XSS vulnerabilities in the Bad Behavior WordPress plugin. Affected component: bad-behavior-wordpress-admin.php in the Bad Behavior plugin for WordPress. Vulnerable versions: before 2.0.47 and 2.2.x before 2.2.5. Attack mechanism: remote attackers could i...
CVE-2010-4271
SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2010-4271
CVE-2010-4271 affects ImpressCMS prior to 1.2.3 RC2. The issue is a SQL injection that could allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Remediation: upgrade to ImpressCMS 1.2.3 RC2 or later.
Ubuntu: Security Advisory (USN-947-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 10.04 LTS : linux regression (USN-947-2)
USN-947-1 fixed vulnerabilities in the Linux kernel. Fixes for CVE-2010-0419 caused failures when using KVM in certain situations. This update reverts that fix until a better solution can be found. We apologize for the inconvenience. It was discovered that the Linux kernel did not correctly handl...
CVE-2009-4271
CVE-2009-4271 affects Linux kernel 2.6.9–2.6.17 on x86_64/amd64. A local unprivileged user can trigger a NULL pointer dereference when a crafted 32-bit process calls mprotect on the Virtual Dynamic Shared Object (VDSO) page, potentially causing a kernel panic (DoS). The issue is tied to memory pr...
CVE-2007-4271
CVE-2007-4271 affects IBM DB2 Universal Database 8 (before Fixpak 15) and 9.1 (before Fixpak 3). Local attackers can cause directory traversal by an environment variable appended to /tmp/ for log file creation, enabling arbitrary file creation and potential privilege escalation via setuid-root bi...
iDefense Security Advisory 08.16.07: IBM DB2 Universal Database Directory Traversal Vulnerability
IBM DB2 Universal Database Directory Traversal Vulnerability iDefense Security Advisory 08.16.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 16, 2007 I. BACKGROUND IBM Corp.'s DB2 Universal Database product is a large database server product commonly used for high end databases. Fo...
CVE-2006-4271
PHP remote file inclusion vulnerability in install/upgrade301.php in Jelsoft vBulletin 3.5.4 allows remote attackers to execute arbitrary PHP code via a URL in the step parameter. NOTE: the vendor has disputed this vulnerability, saying "The default vBulletin requires authentication prior to the...
CVE-2006-4271
PHP remote file inclusion vulnerability in install/upgrade301.php in Jelsoft vBulletin 3.5.4 allows remote attackers to execute arbitrary PHP code via a URL in the step parameter. NOTE: the vendor has disputed this vulnerability, saying "The default vBulletin requires authentication prior to the...
CVE-2006-4271
CVE-2006-4271 is a PHP remote file inclusion in vBulletin 3.5.4, triggered via the step parameter in install/upgrade_301.php (or install/upgrade 301.php), allowing arbitrary PHP code execution. The vendor disputes the flaw, noting authentication is required before using the upgrade system. Connec...
CVE-2005-4271
The CVE-2005-4271 entry describes a buffer overflow in the malloc debug system on IBM AIX 5.3 that allows local users to execute arbitrary code. Affected component: AIX 5.3 malloc debug subsystem. Root cause: buffer overflow in the malloc debug mechanism (as per NVD description). Impact: local pr...
