119 matches found
SUSE-SU-2015:0922-1 Security update for OpenSLP
This update for OpenSLP fixes a bug in SLPIntersectStringList that could lead to an out-of-bounds read CVE-2012-4428. Additionally, the SLP daemon now always use localtime3 when writing to log files to avoid having timestamps with different timezones. Security Issues: CVE-2012-4428...
Apple TV < 7.0.1 Multiple Vulnerabilities (POODLE)
According to its banner, the remote Apple TV device is a version prior to 7.0.1. It is, therefore, affected by the following vulnerabilities : - An error exists related to the way SSL 3.0 handles padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining CBC mod...
Apple TV < 7.0.1 Multiple Vulnerabilities
Binary data 8562.prm...
CVE-2014-4428
CVE-2014-4428 concerns Bluetooth HID Low Energy on Apple OS X prior to 10.10, where unencrypted HID LE connections could allow a previously paired device to spoof a legitimate HID device. The issue is a lack of encryption during HID LE pairing/communication, enabling potential impersonation witho...
CVE-2013-4428
CVE-2013-4428 affects the OpenStack Image Registry and Delivery Service (Glance) in the Folsom/Grizzly line before 2013.1.4 and Havana before 2013.2. The issue is a flaw in the download_image policy enforcement for cached system images: after an image is cached by an authorized download, any auth...
UBUNTU-CVE-2012-4428
openslp: SLPIntersectStringList' Function has a DoS vulnerability...
CVE-2010-4428
Technical details about CVE-2010-4428 are not publicly provided in the supplied documents. Monitor for updates; no explicit affected products, root cause, impact, or remediation are described here.
CVE-2009-4428
SQL injection vulnerability in the JoomPortfolio comjoomportfolio component 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the secid parameter in a showcat action to index.php...
CVE-2009-4428
CVE-2009-4428 describes an SQL injection in the JoomPortfolio (com_joomportfolio) component version 1.0.0 for Joomla!. The vulnerability is triggered by the secid parameter in the showcat action to index.php, allowing remote attackers to execute arbitrary SQL commands. The available data includes...
CVE-2009-4428
creationtimestamp| type| source ---|---|--- 2009-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33418...
CVE-2008-4428
CVE-2008-4428 affects Phlatline’s Personal Information Manager (pPIM) 1.0 and earlier. Unrestricted file upload in upload.php allows remote attackers to upload a .php file and execute it by requesting the file in the top‑level directory, enabling remote code execution (CVSSv2 base score 10.0, HIG...
CVE-2008-4428
creationtimestamp| type| source ---|---|--- 2008-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6215 2008-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6231 2009-02-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8105...
KiSS PC-Link Client Detection
Binary data 4428.prm...
CVE-2007-4428
CVE-2007-4428 concerns Lhaz 1.33, where remote attackers could execute arbitrary code via unknown vectors. The vulnerability was actively exploited in August 2007 by the Exploit-LHAZ.a gzip file, and is described as a separate issue from CVE-2006-4116. The provided documents do not specify the ex...
CVE-2006-4428
CVE-2006-4428 affects Jupiter CMS 1.1.5 (index.php) where a URL in the template parameter could allow remote PHP code execution via a remote file inclusion path. The description notes a dispute: the $template variable is defined as a static value before it is referenced in an include statement, w...
CVE-2006-4428
PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute arbitrary PHP code via a URL in the template parameter. NOTE: CVE disputes this claim, since the $template variable is defined as a static value before it is referenced in an include...
CVE-2006-4428
PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute arbitrary PHP code via a URL in the template parameter. NOTE: CVE disputes this claim, since the $template variable is defined as a static value before it is referenced in an include...
CVE-2005-4428
CVE-2005-4428 documents a cross-site scripting (XSS) vulnerability in Cerberus Helpdesk (index.php) that can be exploited via the query parameter kb_ask . The underlying issue is failure to sanitize user input before reflecting it in dynamically-generated HTML, as described in connected Nessus en...
