Apple WebKit Use After Free Code Execution (CVE-2018-4306)

A use-after-free vulnerability exists in Apple WebKit. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2017-4306

...

CVE-2017-4306

CVE-2017-4306 is rejected/not used per the initial description.

CVE-2016-4306

Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Specially crafted IOCTL requests can cause the driver to return out-of-bounds kernel memory, potentially leaking sensitive information such as privileged tokens or kernel memory addresses...

CVE-2016-4306

CVE-2016-4306 : A set of local kernel information-leak vulnerabilities in Kaspersky Internet Security/KLDISK driver IOCTL handlers allow an unprivileged user to trigger leakage of kernel memory tokens and addresses. The Seebug PoC and OpenVAS entries confirm multiple kernel memory disclosures via...

KLA10945 Information leak and denial of service vulnerabilities in Kaspersky products

Multiple serious vulnerabilities have been found in Kaspersky products. Malicious users can exploit these vulnerabilities to cause denial of service or obtain sensitive information. Below is a complete list of vulnerabilities: 1. Multiple information leaks in different IOCTL handlers of Kaspersky...

Oracle: Security Advisory (ELSA-2008-1016)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 201310-21

Gentoo Linux Local Security Checks GLSA 201310-21 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-4306

Cisco Prime Collaboration Assurance web framework before 10.5.1.53684-1 is vulnerable to a session-ID-based escalation where remote authenticated users can bypass login restrictions and impersonate administrators for arbitrary tenant domains via crafted URLs (CVE-2015-4306; related CVEs 4304/4305...

CVE-2014-4306

CVE-2014-4306 affects WebTitan (logs-x.php) prior to 4.04, where a directory traversal via the logfile parameter in a download action allows remote attackers to read arbitrary files by using .. in the request. This is confirmed across multiple sources (Red Hat, NVD, OpenVAS reference), tying the ...

CVE-2013-4306

Cross-site request forgery CSRF vulnerability in api/ApiQueryCheckUser.php in the CheckUser extension for MediaWiki, possibly Checkuser before 2.3, allows remote attackers to hijack the authentication of arbitrary users for requests that "perform sensitive write actions" via unspecified vectors...

Fedora 17 : glpi-0.83.9.1-1.fc17 (2013-11413)

Upstream changelog : - Bug 4306: Notification on delete document - Bug 4308: Knowbase : encoding issue to clean search - Bug 4309: Items disappear when you click in tabscrollermenu vertical list of tabs - Bug 4310: Password with - Bug 4313: Search problem on tab group view in central - Bug 4329:...

Fedora 19 : glpi-0.83.9.1-1.fc19 (2013-11315)

Upstream changelog : - Bug 4306: Notification on delete document - Bug 4308: Knowbase : encoding issue to clean search - Bug 4309: Items disappear when you click in tabscrollermenu vertical list of tabs - Bug 4310: Password with - Bug 4313: Search problem on tab group view in central - Bug 4329:...

Wireshark 1.8.x < 1.8.2 Multiple Vulnerabilities

The installed version of Wireshark is 1.8.x before 1.8.2. This version is affected by the following vulnerabilities : - The 'DCP ETSI' dissector and 'pcap-ng' parser can attempt a divide by zero operation leading to an application crash. CVE-2012-4285, CVE-2012-4286 - The 'MongoDB', 'XTP', 'AFP',...

CVE-2011-4306

Moodle 1.9.x before 1.9.14 is affected by a Cross-site Scripting (XSS) vulnerability in course/editsection.html that allows remote authenticated users to inject arbitrary script/HTML via crafted data. Root cause: insufficient input sanitization in that page. Impact: potential defacement, social e...

CVE-2011-4306

Cross-site scripting XSS vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data...

Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities - Feb 2011

This host is installed with Adobe Shockwave Player and is prone to multiple remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultcodeexecvulnfeb11.nasl 5424 2017-02-25 16:52:36Z teissa $ Adobe Shockwave Player Multiple Remote Code Execution...

Security update available for Shockwave Player

Security update available for Shockwave Player Release date: February 8, 2011 Vulnerability identifier: APSB11-01 CVE number: CVE-2010-2587, CVE-2010-2588, CVE-2010-2589, CVE-2010-4092, CVE-2010-4093, CVE-2010-4187, CVE-2010-4188, CVE-2010-4189, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192,...

CVE-2010-4192

Adobe Shockwave Player before 11.5.9.620 is affected by CVE-2010-4192, among others, via a crafted Director 3D Assets 0xFFFFFF88 record that triggers an incorrect memory allocation. This can lead to arbitrary code execution or memory corruption and, in some cases, a denial of service. The vulnera...

CVE-2010-4306

CVE-2010-4306 affects Adobe Shockwave Player prior to version 11.5.9.620. The vulnerability allows arbitrary code execution or a denial of service due to memory corruption via unspecified vectors. The entry notes multiple related CVEs and a high-severity impact (NVD base score 9.3). There are no ...