75 matches found
CVE-2012-4611
RSA Adaptive Authentication On-Premise (AAOP) 6.x contains cross-site scripting vulnerabilities (CVE-2012-4611) that could allow an attacker to execute scripts in the context of an authenticated user. The ESA-2012-054 advisory from RSA EMC notes a Base Score of 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) an...
CVE-2011-4611
The CVE-2011-4611 entry relates to the Linux kernel on POWERPC where an integer overflow in perf_event_interrupt (arch/powerpc/kernel/perf_event.c) before version 2.6.39 can allow a local user to trigger a denial of service via performance-event handling. Affected: Linux kernel releases prior to ...
Moderate: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update
An updated rhev-hypervisor6 package that fixes two security issues and one bug is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available f...
Moderate: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severi...
Debian DSA-2389-1 : linux-2.6 - privilege escalation/denial of service/information leak
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-2183 Andrea Righi reported an issue in KSM, a memory-saving de-duplication...
DSA-2389-1 linux-2.6 - several
Bulletin has no description...
CVE-2010-4611
Html-edit CMS 3.1.8 is affected by an information-disclosure path disclosure vulnerability (CVE-2010-4611). A remote attacker can obtain the installation path by directly requesting specific scripts: includes/core_files/pages.php, includes/core_files/menu.php, and extensions/login/frontend/pages/...
CVE-2009-4611
CVE-2009-4611 affects Mort Bay Jetty 6.x through 6.1.22 and 7.0.0, where backtrace data is written without sanitizing non-printable characters. An attacker could abuse this to modify a window’s title or potentially execute arbitrary commands or overwrite files via HTTP requests containing termina...
CVE-2008-4611
SQL injection vulnerability in index.php of PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbitrary SQL commands via the sayfa parameter. Connected sources do not specify affected versions, exact impact, or remediation. No exploitation details are provided in the documents.
CVE-2007-4611
CVE-2007-4611 describes an SQL injection in Moonware (Dale Mooney Gallery) via the id parameter in viewevent.php, allowing remote attackers to submit arbitrary SQL commands. The issue is caused by unsafe handling of the id input leading to a compromised database query. Multiple connected sources ...
CVE-2007-4611
SQL injection vulnerability in viewevent.php in Moonware aka Dale Mooney Gallery allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-4611
The CVE-2006-4611 entry documents a buffer overflow in the _tor_resolve function of dsocks.c in dsocks prior to version 1.4, enabling remote attackers to execute arbitrary code via unspecified vectors (potentially involving a long node name). Affected software is the dsocks project up to version
MS:EB196D95-02F2-4611-A3EA-F42134DAB308
...