82 matches found
CVE-2016-4395
HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...
CVE-2016-4395
HP System Management Homepage (SMH) before v7.6 is vulnerable to remote code execution via a stack/buffer overflow in the SetSMHData handling of admin-group parameters (mod_smh_config.so). Exploitation is described in ZDI-16-587, with unauthenticated remote access leading to code execution under ...
CVE-2016-4395
HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...
CVE-2015-4395
The CVE-2015-4395 affects the HybridAuth Social Login module for Drupal (7.x-2.x) prior to 7.x-2.10. The underlying issue is that when the option “Ask user for a password when registering” is enabled, passwords are stored in plaintext, allowing remote authenticated users with certain permissions ...
HybridAuth Social Login - Less Critical - Information Disclosure - SA-CONTRIB-2015-097
HybridAuth Social Login module enables you to allow visitors to authenticate or login to a Drupal site using their identities from social networks like Facebook or Twitter. The module may store user passwords in plain text. This vulnerability is mitigated by the fact that the option "Ask user for...
CVE-2014-4401
The CVE concerns Apple OS X prior to 10.9.5 and the Intel Graphics Driver subsystem. It describes an unspecified integrated graphics driver routine that does not properly validate calls, allowing arbitrary code execution in a privileged context via a crafted application. The impact is a local cod...
CVE-2014-4395
The CVE-2014-4395 entry concerns Apple OS X prior to 10.9.5, where an unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem does not properly validate calls. This can allow arbitrary code execution in a privileged context via a crafted application. The description ...
CVE-2011-4395
CVE-2011-4395 is rejected; this candidate does not represent an active vulnerability entry.
CVE-2012-4395
Cross-site scripting XSS vulnerability in index.php in ownCloud before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the redirecturl parameter...
CVE-2012-4395
Cross-site scripting XSS vulnerability in index.php in ownCloud before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the redirecturl parameter...
CVE-2012-4395
CVE-2012-4395 is a cross-site scripting (XSS) vulnerability in ownCloud’s index.php that is exploitable via the redirect_url parameter, affecting ownCloud server versions before 4.0.3. The vulnerability is described as a reflected XSS (no specific exploit details provided in the documents). Remed...
SuSE 10 Security Update : ndiswrapper (ZYPP Patch Number 5834)
The ndiswrapper was updated to fix multiple buffer overflows that can be exploited over a connected WLAN by using long ESSID stings. CVE-2008-4395 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Dec10
This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbrealplayermultvulnwindec10.nasl 5373 2017-02-20 16:27:48Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Windows - Dec10 Authors: Sooraj KS Copyright: Copyright c 2010...
RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Linux
RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-4395
RealNetworks RealPlayer contains a heap-based buffer overflow in the AAC decoding path that affects RealPlayer 11.0–11.1, RealPlayer SP 1.0–1.1.5, and Linux RealPlayer 11.0.2.1744, allowing remote code execution via a crafted conditional component in AAC frame data. The related OpenVAS/NVD entrie...
RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities
According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...
Real Networks RealPlayer < 14.0.1.609 (Build 12.0.1.609) Multiple Vulnerabilities
Binary data 5709.prm...
CVE-2009-4395
Cross-site scripting (XSS) vulnerability in the TYPO3 extension Random Prayer 2 (ste_prayer2) version 0.0.3 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, enabling client-side script execution. Affected component is the ste_prayer2 ex...