96 matches found
[SECURITY] [DSA 2796-1] torque security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2796-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 13, 2013 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2796-1] torque security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2796-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 13, 2013 http://www.debian.org/security/faq -...
CVE-2012-4495
CVE-2012-4495 affects the Drupal Mime Mail module (6.x-1.x before 6.x-1.1). The root cause is improper restriction of access to files outside Drupal’s publish files directory, allowing remote authenticated users to send arbitrary files as attachments. Impact is that authenticated users can attach...
CVE-2010-4495
The CVE-2010-4495 entry concerns TIBCO ActiveMatrix components with a critical vulnerability in handling of JMX connections, allowing remote authenticated users to execute arbitrary code. Affected products include: TIBCO ActiveMatrix Service Grid (versions 3.0.0, 3.0.1, 3.1.0); ActiveMatrix Servi...
JomSocial 1.8.8 Shell Upload Vulnerability
Exploit for php platform in category web applications ========================================== JomSocial 1.8.8 Shell Upload Vulnerability ========================================== There is a file upload vulnerability in version 1.8.8 and earlier of JomSocial, the popular community extension fo...
CVE-2009-4495
Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...
CVE-2009-4495
CVE-2009-4495 affects Yaws 1.85, where log writes sanitize non-printable characters incorrectly, enabling a remote attacker to exploit an HTTP request containing a terminal-escape sequence to alter a window title or potentially execute arbitrary commands or overwrite files. The OpenVAS entry expl...
CVE-2009-4495
creationtimestamp| type| source ---|---|--- 2010-01-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33502...
Internet Explorer COM Object Instantiation Memory Corruption (CVE-2006-4495)
Microsoft Internet Explorer allows HTML documents to embed ActiveX controls for the authoring of dynamic web content. ActiveX controls are based on Component Object Model COM technology. The invocation of an ActiveX control is performed by Internet Explorer by internally instantiating an object. ...
Solaris Update for ata and dpt driver 109798-04
Check for the Version of ata and dpt driver OpenVAS Vulnerability Test Solaris Update for ata and dpt driver 109798-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
Solaris Update for ata and dpt driver 109798-04
Check for the Version of ata and dpt driver OpenVAS Vulnerability Test Solaris Update for ata and dpt driver 109798-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...
CVE-2008-4495
CVE-2008-4495 describes an SQL injection in view_cat.php of PHP Auto Dealer 2.7. The vulnerability is triggered via the v_cat parameter, allowing remote attackers to execute arbitrary SQL commands. Existing connected documents confirm the affected product version and vulnerable parameter, but do ...
CVE-2007-4495
CVE-2007-4495 concerns the Solaris 10 ata disk driver on x86, with the impact described as a local denial of service via an unspecified ioctl function (Bug 6433124). Connected documents indicate mitigations in Solaris ATA/DT driver updates, e.g., Solaris Update for ata Driver 117122-03 and relate...
CVE-2006-4495
The CVE-2006-4495 issue affects Microsoft Internet Explorer. It arises when IE instantiates certain Windows 2000 ActiveX COM objects not designed as controls (ciodm.dll, myinfo.dll, msdxm.ocx, creator.dll). The root cause is improper COM object instantiation within IE, which can lead to memory co...
CVE-2005-4495
The advisory concerns SpireMedia mx7, specifically the index.cfm script, where the cid parameter is vulnerable to SQL injection. The root cause is untrusted input used in SQL queries, enabling remote attackers to potentially run arbitrary SQL commands. Some sources also suggest this may illuminat...