74 matches found
CVE-2012-4424
Stack-based buffer overflow in string/strcolll.c in the GNU C Library aka glibc or libc6 2.17 and earlier allows context-dependent attackers to cause a denial of service crash or possibly execute arbitrary code via a long string that triggers a malloc failure and use of the alloca function...
CVE-2012-4424
CVE-2012-4424 is a stack-based buffer overflow in glibc's strcoll_l.c (glibc/ libc6) 2.17 and earlier. The description states that a long string could trigger a malloc failure and use of alloca, enabling context-dependent attackers to cause a denial of service (crash) or potentially execute arbit...
Fedora Update for glibc FEDORA-2013-17475
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for glibc FEDORA-2013-15316
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : glibc-2.17-14.fc19 (2013-15316)
systemd is now required during build so that installing or updating nscd does not result in any warnings. rtkaio bits are now tested correctly. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Fedora Update for glibc FEDORA-2013-15053
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-4424
CVE-2010-4424 affects Oracle PeopleSoft and JDEdwards suite via the PeopleSoft Enterprise PeopleTools component. Affected versions include 8.49.0–8.49.29, 8.50.0–8.50.14, and 8.51.0–8.51.04. The vulnerability is described as an unspecified issue in the Security sub-component that allows remote at...
CVE-2009-4424
CVE-2009-4424 describes an SQL injection in results.php of the Pyrmont WordPress plugin (Pyrmont 2). The vulnerability is triggered via the id parameter, allowing remote attackers to execute arbitrary SQL commands. CVSS v2 base score is 7.5 (HIGH). Affected software is the Pyrmont theme/plugin ve...
CVE-2008-4424
CVE-2008-4424 is a cross-site scripting (XSS) vulnerability in Domain Group Network GooCMS 1.02 (index.php) where the s parameter in the comments action can inject arbitrary script/HTML. Root cause: insufficient input sanitization of the s parameter. Impact: remote attackers can trigger XSS in vi...
CVE-2008-4424
creationtimestamp| type| source ---|---|--- 2008-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32218...
CVE-2007-4424
CVE-2007-4424 affects Apple Safari for Windows
CVE-2006-4424
CVE-2006-4424 is a PHP remote file inclusion vulnerability in phpCOIN 1.2.3. The flaw lies in coin_includes/constants.php where user-supplied _CCFG[_PKG_PATH_INCL] can cause the application to include arbitrary PHP code, enabling an attacker to execute code on the server. Affected component/issue...
CVE-2005-4424
CVE-2005-4424 affects PHP-Kit up to version 1.6.1 R2. The vulnerability is a directory-traversal flaw in the path parameter that, combined with a %00 (null byte) at the end of a filename (e.g., avatar.png%00), enables remote authenticated users to execute arbitrary PHP code. Documented impact ind...
