Debian DSA-4614-1 : sudo - security update

Joe Vennix discovered a stack-based buffer overflow vulnerability in sudo, a program designed to provide limited super user privileges to specific users, triggerable when configured with the 'pwfeedback' option enabled. An unprivileged user can take advantage of this flaw to obtain full root...

CVE-2019-4614

IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a SIGSEGV denial of service caused by converting an invalid message. IBM X-Force ID: 168639...

CVE-2019-4614

CVE-2019-4614 affects IBM MQ and IBM MQ Appliance where a SIGSEGV DoS can occur when a client connects to a Queue Manager and processes an invalid message. Public details from IBM bulletins specify affected versions include IBM MQ/IBM MQ Appliance 8.0, 9.0 LTS, and 9.1 LTS, with remediation via F...

CVE-2013-4614

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/canonwireless.rb 2025-02-06 03:13:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:20+00:00| seen|...

CVE-2017-4614

...

CVE-2017-4614

CVE-2017-4614 is rejected/not used per the Initial Description.

About the security content of iTunes 12.4.2 for Windows - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2016-4614

libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

Memory corruption

libxml2 in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

CVE-2016-4614

CVE-2016-4614 affects libxml2 used by Apple platforms (iOS before 9.3.3, OS X before 10.11.6, iTunes/iCloud on Windows, tvOS, watchOS). The base description notes memory corruption with remote triggering via unknown vectors, and potential unspecified impact. Connected documents corroborate libxml...

Apple iTunes < 12.4.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.4.2. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist in the libxslt component due to improper validation of user-supplied input. An unauthenticated, remote attacker c...

Apple iTunes < 12.4.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes running on the remote Windows host is prior to 12.4.2. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist in the libxslt component due to improper validation of user-supplied input. An unauthenticated, remote attacker can...

WordPress Easy2Map Plugin 1.24 - SQL Injection Vulnerability

Exploit for php platform in category web applications Title: SQL Injection in easy2map wordpress plugin v1.24 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-08 Download Site: https://wordpress.org/plugins/easy2map Vendor: Steven Ellis Vendor Notified: 2015-06-08, fixed in v1.25 Vendor Contact...

CVE-2015-4614

The CVE corresponds to WordPress Easy2Map plugin vulnerabilities: multiple SQL injections in includes/Function.php prior to 1.2.5, exploitable via the mapName parameter in the e2m_img_save_map_name action to wp-admin/admin-ajax.php (and related vectors). Exploitation details shown in public advis...

CVE-2013-4614

The CVE-2013-4614 entry affects Canon printers MG3100, MG5300, MG6100, MP495, MX340, MX870, MX890, MX920, and MX922. The issue is that the printer’s web admin interface reveals the configured Wi‑Fi PSK in cleartext after it has been entered, allowing a physically proximate attacker to read the pa...

CVE-2012-4614

CVE-2012-4614 affects EMC Smarts Network Configuration Manager (NCM) prior to version 9.1. The default NCM configuration allows unauthenticated access to the NCM database, enabling remote attackers to interact via the network (impact described as complete confidentiality/integrity/availability). ...

CVE-2011-4614

TYPO3 core (workspaces extension) is affected by CVE-2011-4614: a remote PHP code execution via the BACK_PATH parameter due to a remote file inclusion vulnerability in AbstractController.php. Affected: TYPO3 4.5.x before 4.5.9 and 4.6.x before 4.6.2, plus development 4.7-. Exploitation involves s...

CVE-2011-4614

PHP remote file inclusion vulnerability in Classes/Controller/AbstractController.php in the workspaces system extension in TYPO3 4.5.x before 4.5.9, 4.6.x before 4.6.2, and development versions of 4.7 allows remote attackers to execute arbitrary PHP code via a URL in the BACKPATH parameter...

CVE-2011-4614

creationtimestamp| type| source ---|---|--- 2012-01-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18308...

FreeBSD : typo3 -- Remote Code Execution (3c957a3e-2978-11e1-89b4-001ec9578670)

The typo3 security team reports : A crafted request to a vulnerable TYPO3 installation will allow an attacker to load PHP code from an external source and to execute it on the TYPO3 installation. This is caused by a PHP file, which is part of the workspaces system extension, that does not validat...