79 matches found
CVE-2014-4455
CVE-2014-4455 concerns a Mach-O segment overlap handling bug in dyld (iOS before 8.1.1 and Apple TV before 7.0.2) that lets a local user bypass code-signing restrictions via a crafted file. The root cause is improper validation of overlapping Mach-O segments, enabling unsigned code execution. The...
CVE-2013-4455
CVE-2013-4455 affects the Katello Installer prior to 0.0.18. During deployment of a child Pulp node, it uses world-readable permissions on /etc/pki/tls/private/katello-node.key, enabling local users to read the private key. The primary impact is unauthorized access to the private key by anyone wi...
SuSE 11.2 Security Update : openCryptoki (SAT Patch Number 7053)
openCryptoki had insecure lock file handling, which might have allowed local users with pkcs11 privileges to look at other local users pkcs11 credentials. Some additional small fixes in pkcsslotd were fixed : - Set pkcsslotd pid to /var/run/pkcsslotd.pid - Removed spurious '-' before no-header...
CVE-2012-4455
openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the 1 LCK..opencryptoki or 2 LCK..opencryptokistdll file in /var/lock/...
CVE-2012-4455
CVE-2012-4455 affects openCryptoki 2.4.1. Local users can create or set world-writable permissions on arbitrary files via a symlink attack on the /var/lock directory (LCK..opencryptoki or LCK..opencryptoki_stdll). This is a local-privilege and file-permission manipulation issue with CVSS v2 base ...
Tiki Wiki CMS Groupware Multiple XSS vulnerabilities
Advisory: Tiki Wiki CMS Groupware Multiple XSS vulnerabilities Advisory ID: INFOSERVE-ADV2011-01 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Tiki 7.2 & 8.0 RC1 Vendor URL: http://info.tiki.org/ Vendor Status: fixed for Tiki 7 New Tiki 6 LTS...
Tiki Wiki CMS Groupware Cross Site Scripting
Advisory: Tiki Wiki CMS Groupware Multiple XSS vulnerabilities Advisory ID: INFOSERVE-ADV2011-01 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Tiki 7.2 & 8.0 RC1 Vendor URL: http://info.tiki.org/ Vendor Status: fixed for Tiki 7 New Tiki 6 LTS...
CVE-2010-4455
CVE-2010-4455 describes an unspecified vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware 11.1.1.2/11.1.1.3 that could allow remote attackers to affect confidentiality and integrity via unknown vectors related to the Apache Plugin. The NVD entry lists a CVSSv2 base scor...
Unfixed XSS vulnerability at www2.scholastic.com
Security researcher alexalghisi, has submitted on 31/10/2010 a cross-site-scripting XSS vulnerability affecting www2.scholastic.com, which at the time of submission ranked 4455 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...
CVE-2008-4455
Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magicquotesgpc is disabled, allows remote attackers to read and execute arbitrary files via a .. dot dot in the language cookie...
CVE-2008-4455
CVE-2008-4455: A directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 and earlier affects the index.php script. When magic_quotes_gpc is disabled, an attacker can cause the language cookie to include a .. sequence, enabling reading and execution of arbitrary files. The conditi...
CVE-2008-4455
creationtimestamp| type| source ---|---|--- 2008-10-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6641...
Sympa Application Detection
Binary data 4455.prm...
CVE-2007-4455
The SIP channel driver chansip in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i Asterisk Appliance 1.x before 1.0.3 allows remote attackers to cause a denial of service memory exhaustion via a SIP dialog that cause...
CVE-2007-4455
The CVE-2007-4455 issue affects the SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x up to 1.4.11, AsteriskNOW up to beta7, Asterisk Appliance Developer Kit 0.x up to 0.8.0, and s800i (Asterisk Appliance) up to 1.0.3. The vulnerability allows remote attackers to cause a denial of servi...
AST-2007-020: Resource Exhaustion Vulnerability in Asterisk SIP channel driver
Asterisk Project Security Advisory - AST-2007-020 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Resource Exhaustion vulnerability in SIP channel | | | driver ...
CVE-2006-4455
Summary : CVE-2006-4455 concerns Xchat up to version 2.6.7 (and earlier) with an unspecified vulnerability that can cause a remote denial-of-service (crash) via the PRIVMSG command. Several sources note the vendor disputes the issue and state it does not affect 2.6.7 or any recent version. Affect...
CVE-2005-4455
CVE-2005-4455 affects cleanhtml.pl 1.129 in LiveJournal CVS prior to 13 Dec 2005. The issue arises from injecting scripting languages via the XSL namespace in XML, exploitable through vectors such as customview.cgi. Impact is remote code execution-like scripting injection, as described by the vul...
