Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2019-4606)

Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details CVEID: CVE-2019-4606 DESCRIPTION: IBM DB2 High Performance Unload could allow a local attacker ...

CVE-2016-4606

Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks...

CVE-2016-4606

CVE-2016-4606 affects curl before 7.49.1 on Apple OS X versions prior to macOS Sierra 10.12. The vulnerability allows remote or local attackers to execute arbitrary code, obtain sensitive information, cause denial-of-service, bypass security restrictions, and perform unauthorized actions. Root ca...

CVE-2012-4606

Citrix XenServer is affected by a Local Privilege Escalation vulnerability (CVE-2012-4606) in multiple releases: 4.1, 6.0, 5.6 SP2, 5.6 FP1, 5.6, 5.5, 5.0, and 5.0 Update 3. The flaw enables local users with access to a guest OS to gain elevated privileges on the host. Exploitation details or exa...

Security Bulletin: IBM Db2 High Performance Unload is affected by 3RD PARTY - - Unquoted Service Path vulnerability

Summary IBM Db2 High Performance Unload has addressed the following vulnerability:Unquoted Service Path Vulnerability Details CVEID: CVE-2019-4606 DESCRIPTION: IBM DB2 High Performance Unload could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search path...

CVE-2019-4606

IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search path vulnerability. By using a executable file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM...

CVE-2019-4606

CVE-2019-4606 affects IBM DB2 High Performance Unload for LUW versions 6.1 and 6.5. The vulnerability is an untrusted search path issue that could allow a local attacker to execute arbitrary code by using an executable file. IBM and related advisories describe impact as local code execution with ...

Security Bulletin: IBM Db2 High Performance Unload is affected by 3RD PARTY - - Unquoted Service Path vulnerability

Summary IBM Db2 High Performance Unload has addressed the following vulnerability:Unquoted Service Path Vulnerability Details Third Party Acknowledgement Info: The vulnerability was reported to IBM by Rich Mirch Relevant CVE Information: CVEID: CVE-2019-4606 DESCRIPTION: IBM DB2 High Performance...

CVE-2017-4606

CVE-2017-4606 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-4606

...

CVE-2015-4606

TYPO3 Job Fair (extension: jobfair) for TYPO3 is vulnerable to unrestricted file upload in versions before 1.0.1 when used with Apache and mod_mime. An attacker can upload a file with an executable extension and access it directly in the extension upload folder to execute arbitrary code, enabling...

CVE-2014-4606

Cross-site scripting XSS vulnerability in redirecttozeenshare.php in the ZeenShare plugin 1.0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the zssid parameter...

CVE-2014-4606

The ZeenShare WordPress plugin (versions 1.0.1 and earlier) is affected by a Cross-Site Scripting (XSS) vulnerability in the redirect_to_zeenshare.php handler. The issue allows remote attackers to inject arbitrary scripts/HTML by passing a crafted zs_sid parameter. The vulnerability is documented...

South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation

No description provided by source. South River Technologies WebDrive Service Bad Security Descriptor Local Privilege Escalation. This module exploits a privilege escalation vulnerability in South River Technologies WebDrive. Due to an empty security descriptor, a local attacker can gain elevated...

openSUSE Security Update : rocksndiamonds (openSUSE-SU-2012:0918-1)

The game rocksndiamonds created /.rocksndiamonds/ world writeable, allowing other users to save files in there or corrupt your game state. This was fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Citrix XenServer本地权限提升漏洞(CVE-2012-4606)

CVE ID: CVE-2012-4606 Citrix XenServer产品线是一种企业级平台，通过灵活的聚合计算和存储资源对数据中心的服务器虚拟化进行管理。 Citrix XenServer存在本地权限提升漏洞，可以访问客户端操作系统的本地攻击者可利用此漏洞在受影响计算机上获取提升的权限。 0 Citrix XenServer 6.0 Citrix XenServer 5.x Citrix XenServer 4.1 厂商补丁： Citrix ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.citrix.com/...

Fedora Update for drupal6-date FEDORA-2012-4606

Check for the Version of drupal6-date OpenVAS Vulnerability Test Fedora Update for drupal6-date FEDORA-2012-4606 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Fedora Update for rocksndiamonds FEDORA-2012-1553

Check for the Version of rocksndiamonds OpenVAS Vulnerability Test Fedora Update for rocksndiamonds FEDORA-2012-1553 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Fedora 15 : rocksndiamonds-3.3.0.1-5.fc15 (2012-1553)

Apply fix for user configuration/cache directory permission issue CVE-2011-4606, bz766805. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 16 : rocksndiamonds-3.3.0.1-5.fc16 (2012-1567)

Apply fix for user configuration/cache directory permission issue CVE-2011-4606, bz766805. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...