105 matches found
CVE-2015-4418
CVE-2015-4418 affects Zoho NetFlow Analyzer builds 10250 and earlier. The vulnerability stems from the password field not setting autocomplete to off, enabling potential unauthorized access when an unattended workstation is used. The connected sources (NVD/NVD-like records) corroborate this descr...
Apache Axis2 <= 1.6.2 Multiple Vulnerabilities
Apache Axis2 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:apache:axis2"; if...
CVE-2014-4388
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted values in unspecified metadata fields, a different vulnerability than...
CVE-2014-4418
Summary of CVE-2014-4418 findings: The issue concerns the IODataQueue implementation in IOKit where kernel trusted fields (queueSize, head, tail) live in a shared memory region mapped into userspace. IOSharedDataQueue extends IODataQueue and places an appendix immediately after the queue, enablin...
CVE-2013-4418
CVE-2013-4418 entry is rejected/not used; does not represent an active vulnerability.
CVE-2012-4418
CVE-2012-4418 concerns Apache Axis2 and its XML signature handling. The provided connected material confirms that this vulnerability arises from the failure to properly verify signed XML messages, allowing an attacker to craft messages that bypass authentication via an XML Signature wrapping atta...
CVE-2010-4418
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft and JDEdwards Suite 8.50.11 through 8.50.15 and 8.51GA through 8.51.05 allows remote attackers to affect confidentiality, integrity, and availability, related to PIA Core Technology...
CVE-2010-4418
Technical details for CVE-2010-4418 are not provided in the supplied documents. No concrete affected products, versions, or remediation are disclosed. Monitor for updates from vendors and security advisories.
PHP <= 5.3.0 DoS Vulnerability
PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...
CVE-2009-4418
CVE-2009-4418 concerns PHP 5.3.0 and earlier, where the unserialize function can be exploited to cause a denial of service via deeply nested serialized data (example pattern: a:1: followed by many {a:1: sequences}). The issue is a context-dependent DoS resulting in resource consumption. Affected ...
[security bulletin] HPSBUX02393 SSRT080057 rev.1 - HP-UX Running DCE, Remote Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01623009 Version: 1 HPSBUX02393 SSRT080057 rev.1 - HP-UX Running DCE, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...
CVE-2008-4418
CVE-2008-4418 is an HP-UX DCE remote Denial of Service affecting HP-UX B.11.11, B.11.23, and B.11.31. The vulnerability could be triggered remotely to cause a DoS (no confidentiality/integrity impact per the sources). The NVD/NVKC score: CVSS v2 base 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:P). Affected ver...
Directory traversal
Directory traversal vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote attackers to read arbitrary files via directory traversal sequences in the wiki parameter, a different vector than CVE-2006-4418...
IBM Rational Clearquest Server Detection
Binary data 4418.prm...
Debian Security Advisory DSA 1011-1 (kernel-patch-vserver, util-vserver)
The remote host is missing an update to kernel-patch-vserver, util-vserver announced via advisory DSA 1011-1. Several vulnerabilities have been discovered in the Debian vserver support for Linux. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-4347 Bjø...
Debian: Security Advisory (DSA-1011-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2007-4418
IBM DB2 UDB 8 before Fixpak 15 does not properly check authorization, which allows remote authenticated users with a certain SELECT privilege to have an unknown impact via unspecified vectors. NOTE: this issue is probably related to CVE-2007-1089, but this is uncertain due to lack of details...
CVE-2007-4418
IBM DB2 UDB 8 prior to Fixpak 15 is reported to fail an authorization check, allowing remote authenticated users with a specific SELECT privilege to trigger an unknown impact via unspecified vectors. The entry notes a possible relation to CVE-2007-1089, but details are unclear. The provided conne...
CVE-2006-4418
CVE-2006-4418 describes a directory traversal in Wikepage 2006.2a Opus 10 (index.php) that lets remote attackers include arbitrary local files via the lng parameter, demonstrated by injecting PHP code into a log file. The vulnerability enables potential partial disclosure and modification (per CV...