126 matches found
CVE-2009-4273
stap-server in SystemTap before 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request...
CVE-2009-4273
CVE-2009-4273 affects SystemTap; stap-server (SystemTap before 1.1) allows remote attackers to execute arbitrary commands via shell metacharacters in stap command-line arguments in a request. The issue is confirmed across multiple feeds/advisories (e.g., OSV/OPENVAS/NASL references) tied to Syste...
CVE-2007-4273
CVE-2007-4273 affects IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3. Local attackers could create arbitrary directories and execute arbitrary code by supplying a crafted localized message file that enables a format-string attack, potentially involving the OSSEMEMDBG or TRC_LOG_FILE envir...
CVE-2006-4273
Cross-site scripting XSS vulnerability in Jelsoft vBulletin 3.5.4 and 3.6.0 allows remote attackers to inject arbitrary web script or HTML by uploading an attachment with a .pdf extension that contains JavaScript, which is processed as script by Microsoft Internet Explorer 6...
CVE-2006-4273
Affected software: Jelsoft vBulletin 3.5.4 and 3.6.0. Vulnerability type/trigger: Cross-site scripting (XSS) via uploading a .pdf attachment containing JavaScript, which is processed as script by Internet Explorer 6. Impact (as stated): enables remote script execution; documents indicate partial ...
