61 matches found
CVE-2011-4426
CVE-2011-4426 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2015-4426
Pimcore CMS is affected by CVE-2015-4426: SQL injection via the filter parameter in admin/asset/grid-proxy. The issue exists in builds prior to 3473, with a fixed version at build 3473. Root cause is inadequate input filtering for the filter parameter, allowing arbitrary SQL execution. The vulner...
Pimcore CMS Build 3450 SQL Injection
Vulnerability title: SQL Injection In Pimcore CMS CVE: CVE-2015-4426 Vendor: Pimcore Product: Pimcore CMS Affected version: Build 3450 Fixed version: Build 3473 Reported by: Josh Foote Details: Details: It was possible to inject arbitrary SQL into the application provided an administrative accoun...
CVE-2014-4426
CVE-2014-4426 affects AFP Server on Apple OS X prior to 10.10. An unauthenticated remote attacker could cause the server to reveal the network addresses of all interfaces via an interface command. The issue was addressed in OS X 10.10 and related security updates (e.g., Apple Security Update/Appl...
CVE-2013-4426
Affected product: pyxtrlock prior to 0.1. The vulnerability arises from an incorrect variable name in the code, which allows physically proximate, local attackers to bypass the lock screen after multiple failed authentication attempts, ultimately triggering a crash. Exploitation details are not p...
MCrypt: User-assisted execution of arbitrary code
Background MCrypt is a replacement of the old unix crypt1 utility. Description Multiple vulnerabilities have been discovered in MCrypt: A boundary error in MCrypt could cause a stack-based buffer overflow CVE-2012-4409. MCrypt contains multiple format string errors CVE-2012-4426. MCrypt does not...
Fedora Update for xalan-j2 FEDORA-2014-4426
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-4426
Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via vectors involving 1 errors.c or 2 mcrypt.c...
CVE-2012-4426
MCrypt before and including version 2.6.8 contains multiple format-string vulnerabilities (CVE-2012-4426) that may allow a remote attacker to cause a crash or possibly execute arbitrary code via errors.c or mcrypt.c. The issue is documented across multiple sources (NVD, Debian/Ubuntu advisories, ...
CVE-2010-4426
Technical details for CVE-2010-4426 are not publicly available in the provided connected documents. Monitor for updates from Oracle/security advisories for affected PeopleSoft PeopleTools versions and remediation steps.
CVE-2009-4426
creationtimestamp| type| source ---|---|--- 2009-12-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10569...
CVE-2008-4426
Cross-site scripting XSS vulnerability in events.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action...
CVE-2008-4426
Cross-site scripting XSS vulnerability in events.php in Phlatline's Personal Information Manager pPIM 1.0 allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action...
CVE-2008-4426
Phlatline's Personal Information Manager (pPIM) 1.0 contains a Cross-site Scripting (XSS) vulnerability in events.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the date parameter in a new action. This is documented under CVE-2008-4426; multiple connected sources...
CVE-2007-4426
CVE-2007-4426 affects Live for Speed (LFS) S1 and S2. The vulnerability enables remote denial of service (server crash) through crafted pre-login packets: (1) a 0x00 byte in a pre-login ID 3 packet triggering a NULL dereference, and (2) a pre-login ID 5 packet missing certain strings triggering a...
CVE-2006-4426
CVE-2006-4426 describes a PHP remote file Inclusion in AlberT-EasySite (AES) 1.0a5 and earlier. The vulnerability exists in AES/modules/auth/phpsecurityadmin/include/logout.php, where an attacker can cause arbitrary PHP code execution by supplying a URL in the PSA_PATH parameter. Affected softwar...
CVE-2006-4426
PHP remote file inclusion vulnerability in AES/modules/auth/phpsecurityadmin/include/logout.php in AlberT-EasySite AES 1.0a5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PSAPATH parameter...
CVE-2005-4426
CVE-2005-4426 involves YaBB before 2.1 where an interpretation conflict allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF extension, causing the HTML to execute in Internet Explorer (as described for CVE-2005-3312). The issue is tied to YaBB’s ...