73 matches found
Debian: Security Advisory (DSA-4629-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4629-1 : python-django - security update
Simon Charette discovered that Django, a high-level Python web development framework, did not properly handle input in its PostgreSQL module. A remote attacker could leverage this to perform SQL injection attacks. C Tenable Network Security, Inc. The descriptive text and package checks in this...
CVE-2011-4629
TYPO3 Cross-site Scripting (CVE-2011-4629) affects TYPO3 core prior to 4.3.12, 4.4.x prior to 4.4.9, and 4.5.x prior to 4.5.4. The issue allows remote attackers to inject script/HTML via the admin panel due to insufficient validation of client-side data in the web application. The vulnerability i...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4629)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4629 advisory. - x86/mds: Add empty commit for CVE-2019-11091 Konrad Rzeszutek Wilk Orabug: 29721935 CVE-2019-11091 - x86/speculation: Support 'mitigations='...
CVE-2017-4629
CVE-2017-4629 is rejected/not used; this entry does not represent an active vulnerability.
Apple Image I/O EXR Color Component Remote Code Execution Vulnerability(CVE-2016-4629)
SUMMARY An exploitable heap based buffer overflow exists in the handling of EXR images on OS X. A crafted EXR document can lead to a heap based buffer overflow resulting in remote code execution. Vulnerability can be triggered via a saved EXR file delivered by other means when opened in any...
CVE-2015-4629
Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other unspecified actions...
CVE-2015-4629
Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other unspecified actions...
CVE-2015-4629
The CVE-2015-4629 entry applies to Huawei E5756S devices, with vulnerable firmware prior to V200R002B146D23SP00C00. The issue arises from a Web UI authentication weakness that allows remote attackers to read device configuration information and enable PIN/PUK authentication, among other unspecifi...
lostarmour.info XSS vulnerability
Vulnerable URL: http://lostarmour.info/armour/item.php?id=4629"alert/OPENBUGBOUNTY/...
CVE-2016-4629
ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted xStride and yStride values in an EXR image...
CVE-2016-4629
ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted xStride and yStride values in an EXR image...
CVE-2016-4629
CVE-2016-4629 affects Appleās OS X ImageIO (OS X before 10.11.6). A crafted EXR image can trigger memory corruption via signed xStride/yStride values, enabling remote code execution or a denial of service. Apple lists OS X 10.11.6 (El Capitan) and Security Update 2016-004 as the fix; patching is ...
Security Advisory - Web UI Authentication Vulnerability in Huawei E5756S
Huawei E5756s has a web UI authentication vulnerability. As a result, an attacker can graft commands to view the device configuration information and perform operations, such as enabling PIN/PUK authentication without logging in to the web UI Vulnerability ID: HWPSIRT-2015-03016. This Vulnerabili...
CVE-2014-4629
EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary files via unspecified vectors related to an insecure direct object reference...
CVE-2014-4629
EMC Documentum Content Server is affected by an Insecure Direct Object Reference (IDOR) vulnerability (CVE-2014-4629) in versions 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19. The issue allows remote authenticated attackers to read or delete arbitrary files via unspecified vectors. Remediation...
CVE-2013-4629
CVE-2013-4629 concerns Huawei VP9610/VP9620 video-conference hardware where the login session ID is not updated after authentication, enabling session hijacking by a remote, authenticated attacker. Reported impacts align with CVSS metrics: high impact on confidentiality, integrity, and availabili...
CVE-2012-4629
The CVE-2012-4629 issue affects Cisco ASA-CX Context-Aware Security module and Cisco Prime Security Manager (PRSM) prior to version 9.0.2-103. The vulnerability allows remote attackers to cause a denial of service (disk consumption and application hang) by sending unspecified IPv4 packets that tr...
CVE-2010-4629
CVE-2010-4629 affects MyBB (MyBulletinBoard) up to version 1.4.12. The issue arises because the application does not properly restrict uid values for group join requests, enabling remote attackers with guest access to submit join forms for moderated groups via the pages related to usercp.php and ...