173 matches found
RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities
According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...
Real Networks RealPlayer < 14.0.1.609 (Build 12.0.1.609) Multiple Vulnerabilities
Binary data 5709.prm...
RHEL 4 : HelixPlayer (RHSA-2010:0094)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0094 advisory. - HelixPlayer / RealPlayer: GIF file heap overflow CVE-2009-4242 - HelixPlayer / RealPlayer: compressed GIF heap overflow CVE-2009-4245 -...
CVE-2009-4378
The IPMI dissector in Wireshark 1.2.0 through 1.2.4 on Windows allows remote attackers to cause a denial of service crash via a crafted packet, related to "formatting a date/time using strftime."...
CVE-2009-4378
Wireshark CVE-2009-4378 affects the IPMI dissector in Wireshark 1.2.0–1.2.4 on Windows, where a crafted IPMI packet can crash the dissector (denial-of-service) due to how formatting a date/time is handled with strftime. The vulnerability is documented across multiple sources (OpenVAS entries and ...
CVE-2008-4378
CVE-2008-4378 describes an SQL injection vulnerability in the file report.php of the affected product family “Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier.” The flaw allows remote attackers to inject and execute arbitrary SQL commands through the id parameter. Public references in the connected ...
CVE-2008-4378
creationtimestamp| type| source ---|---|--- 2008-09-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6403...
SuSE 10 Security Update : festival (ZYPP Patch Number 4378)
The festival daemon runs as root. The default config doesn't have a password set. A local attacker could therefore connect to the daemon to have commands executed as root. CVE-2007-4074 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
CVE-2007-4378
CVE-2007-4378 describes multiple format string vulnerabilities in Babo Violent 2 (version 2.08.00 and earlier). The issue allows remote attackers to execute arbitrary code through format string specifiers in (1) a message or (2) data associated with an admin login. The connected documents confirm...
CVE-2006-4378
Multiple PHP remote file inclusion vulnerabilities in the Rssxt component for Joomla! comrssxt, possibly 2.0 Beta 1 or 1.0 and earlier, allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 pinger.php, 2 RPC.php, or 3 rssxt.php. NOTE: another...
CVE-2006-4378
"CVE-2006-4378" affects Joomla! com_rssxt, with remote file inclusion in the Rssxt component (versions prior to 2.0 Beta 1). Vulnerable files include pinger.php, RPC.php, and rssxt.php, where an attacker could supply a mosConfig_absolute_path URL to execute arbitrary PHP code. The issue’s validit...
CVE-2005-4378
CVE-2005-4378 is a SQL injection vulnerability in Page.asp of Baseline CMS 1.95 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter. The reported CVSS v2 base score is 7.5 (HIGH) with network access, low attack complexity, and no authentica...
