Bugzilla Mail Authentication Mechanism Bypass (CVE-2015-4499)

An authentication mechanism bypass vulnerability has been found in Bugzilla. Any unauthenticated remote attacker may leverage this vulnerability to gain access to database information regarding unpatched bugs, and exploit them to attack the affected pieces of software before security patches are...

Bugzilla Privilege Escalation Security Patch

Developers and organizations that use the Bugzilla open source bug-tracking system should upgrade to current versions after the disclosure of details of a vulnerability in its email-based permissions process. The flaw, CVE-2015-4499, was patched last week in versions 4.2.15, 4.4.10 and 5.0.1 afte...

CVE-2015-4499

CVE-2015-4499 affects Bugzilla across multiple branches (Bugzilla 2.x/3.x/4.x pre-4.2.15, pre-4.4.10 for 4.x line, and 5.x pre-5.0.1). The flaw mishandles long e-mail addresses during account creation, truncating login names longer than 127 characters (notably an @mozilla.com.example.com address ...

CVE-2014-4499

The App Store process in CommerceKit Framework in Apple OS X before 10.10.2 places Apple ID credentials in App Store logs, which allows local users to obtain sensitive information by reading a file...

CVE-2014-4499

CVE-2014-4499 affects the CommerceKit Framework on OS X Yosemite prior to 10.10.2. The App Store process could log Apple ID credentials in App Store logs, enabling local users to read sensitive information from a file. Mitigation per the sources is to apply the OS X 10.10.2 security update (Apple...

CVE-2013-4499

Cross-site scripting XSS vulnerability in the Bean module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via the bean title...

CVE-2013-4499

The vulnerability CVE-2013-4499 affects the Drupal Bean module (Bean 7.x-1.x) for Drupal 7.x, where the bean title is not sufficiently filtered, allowing an attacker to inject arbitrary script/HTML via the title (XSS). Root cause: inadequate input sanitization in the Bean titles path. Affected ve...

SA-CONTRIB-2013-082 - Bean - Cross Site Scripting (XSS)

This module enables you to create block entities a.k.a. beans. The module did not sufficiently filter bean titles for dangerous html. This vulnerability is mitigated by the fact that an attacker must have permission to create or edit beans. CVE identifiers issued CVE-2013-4499 Versions affected...

CVE-2012-4499

The CVE-2012-4499 issue affects the Drupal Email Field module (versions 6.x-1.x prior to 6.x-1.2 and 7.x-1.x prior to 7.x-1.1). The vulnerability arises on the contact formatter page, allowing remote attackers to email the stored address in the entity via unspecified vectors. The impact is exposu...

CVE-2012-4499

The contact formatter page in the Email Field module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to email the stored address in the entity via unspecified vectors...

CVE-2011-4499

The CVE-2011-4499 issue affects the Broadcom UPnP IGD stack used by Cisco Linksys WRT54G/WRT54GS devices. The root cause is a vulnerability in the UPnP AddPortMapping handling on the WAN interface, allowing remote attackers to establish arbitrary port mappings (external forwarding). Affected firm...

SuSE 11.1 Security Update : Perl (SAT Patch Number 4499)

This update fixes a bug in Perl that makes spamassassin crash and does not allow bypassing taint mode by using lc or uc anymore. - CVE-2010-4777: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P - CVE-2011-1487: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:P/A:N: Permissions, Privileges, and...

CVE-2010-4499

CVE-2010-4499 affects the Collaborative Information Manager server (and ActiveCatalog) prior to versions 8.1.0 and 1.0.1, respectively. The issue is a session fixation vulnerability that allows remote attackers to hijack web sessions via unspecified vectors. The provided documents consistently de...

Fedora 11 : zabbix-1.6.8-1.fc11 (2010-0278)

Update to 1.6.8 - Upstream changelog: http://www.zabbix.com/rn1.6.8.php - fixes 2 issues from 551331 CVE-2009-4499 - https://support.zabbix.com/browse/ZBX-1031 CVE-2009-4501 - https://support.zabbix.com/browse/ZBX-1355 Note that Tenable Network Security has extracted the preceding description...

Fedora Update for zabbix FEDORA-2010-0266

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for zabbix FEDORA-2010-0278

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-4499

SQL injection vulnerability in the gethistorylastid function in the nodewatcher component in Zabbix Server before 1.6.8 allows remote attackers to execute arbitrary SQL commands via a crafted request, possibly related to the sendhistorylastid function in zabbixserver/trapper/nodehistory.c...

CVE-2009-4499

CVE-2009-4499 describes an SQL injection in Zabbix Server’s nodewatcher component (get_history_lastid), exploitable via crafted requests to the server, potentially involving zabbix_server/trapper/nodehistory.c. Affects Zabbix Server prior to 1.6.8. Red Hat and Fedora advisories confirm the issue ...

CVE-2009-4499

creationtimestamp| type| source ---|---|--- 2009-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10432...

CVE-2008-4499

creationtimestamp| type| source ---|---|--- 2008-10-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32463 2008-10-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32464...