CVE-2014-4401

The CVE concerns Apple OS X prior to 10.9.5 and the Intel Graphics Driver subsystem. It describes an unspecified integrated graphics driver routine that does not properly validate calls, allowing arbitrary code execution in a privileged context via a crafted application. The impact is a local cod...

Security fix for the ALT Linux 8 package libvirt version 1.1.4-alt1

Nov. 6, 2013 Alexey Shabalin 1.1.4-alt1 - 1.1.4 - fixed CVE-2013-4400, CVE-2013-4401...

CVE-2013-4401

The virConnectDomainXMLToNative API function in libvirt 1.1.0 through 1.1.3 checks for the connect:read permission instead of the connect:write permission, which allows attackers to gain domain:write privileges and execute Qemu binaries via crafted XML. NOTE: some of these details are obtained fr...

CVE-2013-4401

CVE-2013-4401 affects libvirt 1.1.0–1.1.3, where virConnectDomainXMLToNative incorrectly checks connect:read instead of connect:write. This mispermission enables a remote attacker to obtain domain:write privileges and may allow execution of Qemu binaries via crafted XML. Public disclosures in var...

CVE-2011-4401

CVE-2011-4401 is rejected/not used and does not represent an active vulnerability.

CVE-2011-4401

...

RHEL 5 : flash-plugin (RHSA-2008:0945)

An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 18th November 2008 The erratum has been updated to...

CVE-2012-4401

Summary: CVE-2012-4401 affects Moodle core (Moodle 2.2.x before 2.2.5 and 2.3.x before 2.3.2). The issue lets remote authenticated users bypass intended capability restrictions and modify topics by exploiting course-editing capabilities. What’s affected: Moodle course editing functionality; speci...

CVE-2010-4401

languages.inc.php in DynPG CMS 4.2.0 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message...

CVE-2010-4401

DynPG CMS 4.2.0 is vulnerable via languages.inc.php, where direct requests disclose the installation path due to improper error handling. Exploitation details appear in public advisories; remediation is to apply the DynPG 4.2.1 security update. Other vulnerabilities in DynPG are noted in consolid...

Multiple Vulnerabilities in DynPG

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in DynPG which could be exploited to perform SQL injection attacks, disclose potentially sensitive information and compromise vulnerable system. 1 Installation path disclosure weakness in in DynPG: CVE-2010-4401 The...

CVE-2009-4401

The CVE-2009-4401 entry concerns the Parish Administration Database (ste_parish_admin) TYPO3 extension, affected in version 0.1.3 and earlier. The vulnerability is a SQL injection flaw that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. This indicates a code-le...

Gentoo Security Advisory GLSA 200903-23 (netscape-flash)

The remote host is missing updates announced in advisory GLSA 200903-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200903-23 (netscape-flash)

The remote host is missing updates announced in advisory GLSA 200903-23. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Adobe AIR APSB08-23 / APSB08-22 / APSB08-20 / APSB08-18 Multiple Vulnerabilities

Binary data 4760.prm...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 3 and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 18th November 2008 This erratum has been updated to...

openSUSE 10 Security Update : flash-player (flash-player-5747)

This update of flash-player fixes several critical security vulnerabilities. CVE-2007-6243, CVE-2008-3873, CVE-2007-4324, CVE-2008-4401, CVE-2008-4503, CVE-2008-4546 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 5757)

This update of flash-player fixes several critical security vulnerabilities. CVE-2007-6243 / CVE-2008-3873 / CVE-2007-4324 / CVE-2008-4401 / CVE-2008-4503 / CVE-2008-4546 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000...

FreeBSD Ports: linux-flashplugin

The remote host is missing an update to the system as announced in the referenced advisory. VID 78f456fd-9c87-11dd-a55e-00163e000016 OpenVAS Vulnerability Test $ Description: Auto generated from VID 78f456fd-9c87-11dd-a55e-00163e000016 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Adobe Flash Player FileReference API任意文件上传/下载漏洞

CVECAN ID: CVE-2008-4401 Flash Player是一款非常流行的FLASH播放器。 Adobe Flash Player中的ActionScript对FileReference上传API的FileReference.browse操作或FileReference下载API的FileReference.download操作没有要求用户交互，用户可能在不知情的情况下上传或下载恶意文件 Adobe Flash Player 9.0.124.0 Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...