57 matches found
F5 BIG-IP - TMM vulnerability CVE-2015-4638
The remote host is missing a security patch. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...
CVE-2014-4638
EMC Documentum Web Development Kit (WDK) prior to version 6.8 contains a frame-injection vulnerability (CVE-2014-4638). The issue can allow remote attackers to induce the user to load an attacker-controlled page in a frame and potentially harvest sensitive information, with the documented base CV...
CVE-2012-4638
Cisco IOS before 15.11SY allows local users to cause a denial of service device reload by establishing an outbound SSH session, aka Bug ID CSCto00318...
CVE-2012-4638
Cisco IOS before 15.1(1)SY is affected by CVE-2012-4638, where local users can trigger a denial of service (device reload) by establishing an outbound SSH session (Bug ID CSCto00318). The impact is a local-privilege-independent DoS that can reboot the device; no exploitation details are provided ...
CVE-2011-4638
SpamTitan/WebTitan is affected by multiple SQL injection vulnerabilities tracked as CVE-2011-4638. The issues exist in the product before version 3.60 and allow manipulation of the database through specific HTTP parameters: (1) login-x.php via the username parameter (remote unauthenticated), and ...
CVE-2010-4638
CVE-2010-4638 affects the Joomla! component com_jquarks4s (version 1.0.0). The vulnerability is in the submitSurvey function (controller.php); when magic_quotes_gpc is disabled, an attacker can inject SQL via the q parameter in a submitSurvey action to index.php. This leads to arbitrary SQL comma...
Debian: Security Advisory (DSA-2000-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 2000-1] New ffmpeg packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2000-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...
CVE-2009-4638
CVE-2009-4638 is an FFmpeg 0.5 integer overflow vulnerability that could allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. The connected security records (Debian DSA-2000-1, GLSA 201310-12, and related OpenVAS/NASL entries) confi...
SECOBJADV-2008-05: Symantec Veritas Storage Foundation Arbitrary File Read Vulnerability
====================================================================== = Security Objectives Advisory SECOBJADV-2008-05 = ====================================================================== Veritas Storage Foundation Arbitrary File Read Vulnerability...
CVE-2008-4638
CVE-2008-4638 affects Symantec Veritas Storage Foundation (VxFS) 5.0 and earlier, via the Quick I/O for Databases feature. The vulnerable component is the setuid root utility qioadmin , which can be fed an arbitrary filename and will write that file’s contents to the standard error stream, enabli...
CVE-2008-4638
qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...
CVE-2007-4638
Affected software: Blizzard Entertainment StarCraft Brood War (version 1.15.1 and earlier). Vulnerability: Remote attacker can trigger a denial-of-service by supplying a malformed map, causing an out-of-bounds read during the minimap preview. Impact: Denial of service with application crash; no c...
CVE-2006-4638
CVE-2006-4638 affects ACGV News 0.9.1 and earlier. It is a PHP remote file inclusion in article.php triggered by a URL in the PathNews parameter, allowing arbitrary PHP code execution. The vulnerability is described with a CVSS v2 base score of 5.1 (MEDIUM) with network attack vector, no authenti...
CVE-2005-4638
The CVE-2005-4638 entry involves Kayako SupportSuite 3.00.26 and earlier where the index.php in multiple modules (news, downloads, knowledgebase) can reveal the full server path via specific parameters: _a, newsid, downloaditemid, kbarticleid. This is a path disclosure vulnerability in the affect...