79 matches found
CVE-2013-4414
Cross-site scripting XSS vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to inject arbitrary web script or HTML via the "Max allowance" field in the "Set limit" form...
Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.4 security update
An updated Grid component package that fixes multiple security issues is now available for Red Hat Enterprise MRG 2.4 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...
Mandriva Linux Security Advisory : mariadb (MDVSA-2013:102)
Updated mariadb packages includes fixes for the following security vulnerabilities : Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.26 and earlier allows remote attackers to affect integrity and availability, related to MySQL Client CVE-2012-3147. Unspecified...
openSUSE: Security Advisory for mariadb (openSUSE-SU-2013:0014-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-4414
Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to t...
CVE-2012-4414
Disclaimer: This data contains information about vulnerable...
CVE-2012-4414
CVE-2012-4414 concerns multiple SQL injection vulnerabilities in the replication code of MySQL/MariaDB. Public details describe remote authenticated access could allow arbitrary SQL execution via the binary log vectors in MySQL versions prior to 5.5.29 and MariaDB 5.1.x–5.1.62, 5.2.x–5.2.12, 5.3....
CVE-2010-4414
CVE-2010-4414 concerns Oracle VM VirtualBox Extensions Local Privilege Escalation. OpenVAS/Gentoo GLSA entries tie it to VirtualBox Extensions with local privilege escalation on Linux/Windows, CVSS v2 base 6.8. The Gentoo GLSA 201204-01 and associated advisories recommend upgrading VirtualBox to ...
Debian DSA-1978-1 : phpgroupware - several vulnerabilities
Several remote vulnerabilities have been discovered in phpgroupware, a Web-based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-4414 A SQL injection vulnerability was found in the authentication module. -...
CVE-2009-4414
SQL injection vulnerability in phpgwapi /inc/class.authsql.inc.php in phpGroupWare 0.9.16.12, and possibly other versions before 0.9.16.014, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the passwd parameter to login.php...
CVE-2009-4414
CVE-2009-4414 concerns phpGroupWare. The vulnerability is an SQL injection in the authentication path: phpGroupWare’s phpgwapi/inc/class.auth_sql.inc.php allows remote attackers to execute arbitrary SQL via the passwd parameter on login.php, typically when magic_quotes_gpc is disabled. Affected v...
phpGroupWare Multiple Input Validation Vulnerabilities
phpGroupWare is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to disclose sensitive information, steal cookie-based authentication credentials, compromise the application, access or...
CVE-2008-4414
CVE-2008-4414 affects HP Tru64 UNIX 5.1B-3 and 5.1B-4 where the AdvFS showfile command contains a local privilege escalation vulnerability. The HP security bulletin and NVD entries describe an exploit vector limited to local users that could grant extended privileges via unspecified vectors, with...
Cisco VPN Client on Windows Dial-up Networking Dialog Local Privilege Escalation
The version of the Cisco VPN client installed on the remote host reportedly allows an unprivileged local user to elevate his privileges to the LocalSystem account by enabling the 'Start Before Login' feature and configuring a VPN profile to use Microsoft's Dial-Up Networking interface. C Tenable...
CVE-2007-4414
Cisco VPN Client on Windows before 4.8.02.0010 allows an unprivileged local user to escalate to LocalSystem by enabling Start Before Logon and Microsoft Dial-Up Networking, then interacting with the dial-up dialog. A fix is available in 4.8.02.0010 or later; apply the Cisco advisory (cisco-sa-200...
CVE-2005-4414
Technical details for CVE-2005-4414 are not publicly available in the provided documents. Monitor for updates.
MS:F597029A-D827-4414-BC15-26D27F2DF0F2
...