65 matches found
CVE-2018-4426
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...
CVE-2018-4426
CVE-2018-4426 is an Apple memory corruption vulnerability affecting pre-12.x macOS Mojave, iOS 12, tvOS 12 and watchOS 5, addressed by Apple in subsequent security updates. The description states the issue was mitigated by improved memory handling. Public documentation in connected items confirms...
CVE-2017-4426
CVE-2017-4426 entry is rejected/not used and does not represent an active vulnerability.
CVE-2011-4426
CVE-2011-4426 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2015-4426
Pimcore CMS is affected by CVE-2015-4426: SQL injection via the filter parameter in admin/asset/grid-proxy. The issue exists in builds prior to 3473, with a fixed version at build 3473. Root cause is inadequate input filtering for the filter parameter, allowing arbitrary SQL execution. The vulner...
Pimcore CMS Build 3450 SQL Injection
Vulnerability title: SQL Injection In Pimcore CMS CVE: CVE-2015-4426 Vendor: Pimcore Product: Pimcore CMS Affected version: Build 3450 Fixed version: Build 3473 Reported by: Josh Foote Details: Details: It was possible to inject arbitrary SQL into the application provided an administrative accoun...
CVE-2014-4426
CVE-2014-4426 affects AFP Server on Apple OS X prior to 10.10. An unauthenticated remote attacker could cause the server to reveal the network addresses of all interfaces via an interface command. The issue was addressed in OS X 10.10 and related security updates (e.g., Apple Security Update/Appl...
CVE-2013-4426
Affected product: pyxtrlock prior to 0.1. The vulnerability arises from an incorrect variable name in the code, which allows physically proximate, local attackers to bypass the lock screen after multiple failed authentication attempts, ultimately triggering a crash. Exploitation details are not p...
MCrypt: User-assisted execution of arbitrary code
Background MCrypt is a replacement of the old unix crypt1 utility. Description Multiple vulnerabilities have been discovered in MCrypt: A boundary error in MCrypt could cause a stack-based buffer overflow CVE-2012-4409. MCrypt contains multiple format string errors CVE-2012-4426. MCrypt does not...
Fedora Update for xalan-j2 FEDORA-2014-4426
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-4426
Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via vectors involving 1 errors.c or 2 mcrypt.c...
CVE-2012-4426
MCrypt before and including version 2.6.8 contains multiple format-string vulnerabilities (CVE-2012-4426) that may allow a remote attacker to cause a crash or possibly execute arbitrary code via errors.c or mcrypt.c. The issue is documented across multiple sources (NVD, Debian/Ubuntu advisories, ...
CVE-2010-4426
Technical details for CVE-2010-4426 are not publicly available in the provided connected documents. Monitor for updates from Oracle/security advisories for affected PeopleSoft PeopleTools versions and remediation steps.
CVE-2009-4426
creationtimestamp| type| source ---|---|--- 2009-12-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10569...
CVE-2008-4426
Cross-site scripting XSS vulnerability in events.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action...
CVE-2008-4426
Cross-site scripting XSS vulnerability in events.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action...
CVE-2008-4426
Phlatline's Personal Information Manager (pPIM) 1.0 contains a Cross-site Scripting (XSS) vulnerability in events.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action. This is documented under CVE-2008-4426; multiple connected sources...
CVE-2007-4426
CVE-2007-4426 affects Live for Speed (LFS) S1 and S2. The vulnerability enables remote denial of service (server crash) through crafted pre-login packets: (1) a 0x00 byte in a pre-login ID 3 packet triggering a NULL dereference, and (2) a pre-login ID 5 packet missing certain strings triggering a...