EMC Documentum Content Server: arbitrary code execution (incomplete fix in CVE-2015-4532)

Product: EMC Documentum Content Server Vendor: EMC Version: ANY CVE: N/A Risk: High Status: public/not fixed For detailed description see http://seclists.org/bugtraq/2015/Jul/51 New behavior introduced in CVE-2015-4532: API ?,c,execute domethod WITH METHOD='dmbptransition', ARGUMENTS=' repo repo...

CVE-2015-4532

EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization and does not properly restrict object types, which allows remote authenticated users to run save RPC commands with super-user privileges, an...

CVE-2015-4532

CVE-2015-4532 affects EMC Documentum Content Server prior to specific service packs/patch levels (6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, 7.2 before P02). The root cause is insufficient authorization checks and lack of proper restriction of object types, enabling remote aut...

EMC Documentum Content Server Multiple Vulnerabilities (ESA-2015-131)

The version of EMC Documentum Content Server running on the remote host is affected by multiple vulnerabilities : - A privilege escalation vulnerability exists due to improper authorization checks performed on subgroups within the dmsuperusers group. An authenticated, remote attacker can exploit...

EMC Documentum Content Server Code Execution Vulnerability

EMC Documentum Content Server suffers from an arbitrary code execution vulnerability. Product: EMC Documentum Content Server Vendor: EMC Version: ANY CVE: N/A Risk: High Status: public/not fixed For detailed description see http://seclists.org/bugtraq/2015/Jul/51 New behavior introduced in...

EMC Documentum Content Server Code Execution

Product: EMC Documentum Content Server Vendor: EMC Version: ANY CVE: N/A Risk: High Status: public/not fixed For detailed description see http://seclists.org/bugtraq/2015/Jul/51 New behavior introduced in CVE-2015-4532: API ?,c,execute domethod WITH METHOD='dmbptransition', ARGUMENTS=' repo repo...

Ubuntu: Security Advisory (USN-2342-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2342-1: QEMU vulnerabilities

Michael S. Tsirkin, Anthony Liguori, and Michael Roth discovered multiple issues with QEMU state loading after migration. An attacker able to modify the state data could use these issues to cause a denial of service, or possibly execute arbitrary code. CVE-2013-4148, CVE-2013-4149, CVE-2013-4150,...

CVE-2014-4532

The CVE-2014-4532 entry documents a cross-site scripting (XSS) vulnerability in the WordPress GarageSale plugin prior to version 1.2.3. The flaw exists in the templates/printAdminUsersList_Footer.tpl.php and allows remote attackers to inject arbitrary script or HTML via the page parameter. Affect...

CVE-2012-4532

CVE-2012-4532 affects Joomla! 2.5.x prior to 2.5.7, where the Language Switcher module (modules/mod_languages/tmpl/default.php) is vulnerable to cross-site scripting via PATH_INFO to index.php. The issue is an XSS in the Language Switcher component, enabling remote injection of script/HTML. The p...

CVE-2012-4532

Cross-site scripting XSS vulnerability in modules/modlanguages/tmpl/default.php in the Language Switcher module for Joomla! 2.5.x before 2.5.7 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to index.php. NOTE: some of these details are obtained from third party...

CVE-2011-4532

creationtimestamp| type| source ---|---|--- 2011-11-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18165...

CVE-2009-4532

Cross-site scripting XSS vulnerability in the Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, allows remote authenticated users, with webform creation privileges, to inject arbitrary web script or HTML via a field label...

CVE-2009-4532

The CVE-2009-4532 issue affects the Drupal Webform module (5.x prior to 5.x-2.8 and 6.x prior to 6.x-2.8). The root cause is a Cross-site Scripting (XSS) vulnerability in a field label. An attacker must be a remote authenticated user with webform creation privileges, and can inject arbitrary web ...

Fedora Update for autofs FEDORA-2007-4532

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-4532

Cross-site scripting XSS vulnerability in index.php in MaxiScript Website Directory allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action...

CVE-2008-4532

CVE-2008-4532 describes a reflected cross-site scripting vulnerability in MaxiScript Website Directory: index.php, exploitable via the keyword parameter in a search action. The flaw stems from improper handling of user input, allowing injection of arbitrary HTML/JavaScript. Impact: could enable a...

CVE-2008-4532

creationtimestamp| type| source ---|---|--- 2008-10-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32455...

Debian Security Advisory DSA 969-1 (scponly)

The remote host is missing an update to scponly announced via advisory DSA 969-1. Max Vozeller discovered a vulnerability in scponly, a utility to restrict user commands to scp and sftp, that could lead to the execution of arbitray commands as root. The system is only vulnerable if the program...

CVE-2007-4532

CVE-2007-4532 (Soldat) affects Soldat game server 1.4.2 and earlier and dedicated server 2.6.2 and earlier. The issue allows remote attackers to cause a denial-of-service (client lockout) by sending a sequence of UDP join packets from a spoofed IP, which triggers temporary blacklisting of that IP...