116 matches found
Ubuntu: Security Advisory (USN-1602-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-1602-1: Ruby vulnerabilities
Tyler Hicks and Shugo Maeda discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. An attacker could use this flaw to bypass intended access restrictions. CVE-2012-4464, CVE-2012-4466...
Fedora 18 : ruby-1.9.3.194-18.fc18 (2012-15376)
Some security flaws were found on ruby currently shipped on Fedora 18 where malicious user can bypass safe mechanize by raising exception intentionally and make arbitrary strings tainted. This flaw were now registered as CVE-2012-4464 and CVE-2012-4466. This update rpm will fix this issue. Note...
CVE-2010-4464
Concrete remediation details exist in connected docs: Solaris patch 137631-17 (SPARC) and 137632-17 (x86) address Sun Convergence 1.0-17.01 core patch and are listed alongside CVE-2010-4464 (and related CVEs) in Nessus plugins. The affected product is Sun Convergence 1.0; remediation is to instal...
CVE-2009-4464
CVE-2009-4464 : Cross-site scripting (XSS) in Active Business Directory 2, via searchadvance.asp, allows remote attackers to inject arbitrary web script/HTML through the search parameter. The vulnerability arises from insufficient sanitization of user input, enabling stored/reflective-like effect...
CVE-2009-4464
creationtimestamp| type| source ---|---|--- 2009-12-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34380...
CVE-2008-4464
Vulnerability: CVE-2008-4464 affects Vastal I‑Tech Mag Zone (view_mags.php) where the cat_id parameter is vulnerable to SQL injection, enabling remote attackers to execute arbitrary SQL commands. Underlying issue: improper input handling in the view_mags.php component. Impact: partial confidentia...
CVE-2008-4464
creationtimestamp| type| source ---|---|--- 2008-09-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6380...
CVE-2007-4464
The CVE-2007-4464 entry describes a CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander. The issue affects the plugin’s handling of PE exports: an attacker could inject CRLF sequences into the IMAGE_EXPORT_DIRECTORY data, enabling spoofing of information shown in the Ima...
CVE-2006-4464
The CVE-2006-4464 entry concerns the Nokia Browser (likely Nokia Symbian S60 Browser 3rd edition) where remote attackers can trigger a denial of service by JavaScript that constructs a very large Unicode string. This document set confirms the vulnerability exists in a mobile browser component cap...
CVE-2005-4464
The vulnerability CVE-2005-4464 affects Ingate Firewall (before 4.3.4) and SIParator (before 4.3.4). A remote attacker can cause a denial-of-service (kernel deadlock) by sending a SYN packet for a TCP stream that requires an RST in response. No remediation or mitigation details are provided in th...
MS:87A27B3C-4E73-4464-8470-4AB904B6FC5C
...
MS:DC88E03D-4D73-4464-8DF6-FC4CAE1F624C
...
MS:ACE82467-496F-4464-B19B-FFF6D16D8531
...