75 matches found
Fedora Update for squashfs-tools FEDORA-2015-10750
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-4646
Buffer overflow in the FPDFBookmarkGetTitle method in Foxit PDF SDK DLL before 3.1.1.5005 allows context-dependent attackers to execute arbitrary code via unspecified vectors...
CVE-2014-4646
The CVE-2014-4646 vulnerability concerns Foxit PDF SDK DLLs with a buffer overflow in FPDFBookmark_GetTitle, prior to version 3.1.1.5005. The issue enables context-dependent attackers to execute arbitrary code, as described across multiple sources (NVD/NVD- mirrored entries and ZDI advisory). The...
CVE-2011-4646
SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the ratings shortcode when creating a...
CVE-2011-4646
CVE-2011-4646 affects the WP-PostRatings WordPress plugin (versions 1.50, 1.61 and likely earlier than 1.62). The vulnerability is a SQL injection in wp-postratings.php that allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the rating...
CVE-2011-4646
SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the ratings shortcode when creating a...
CVE-2010-4646
Hastymail2 is affected by a Cross-site scripting (XSS) vulnerability (CVE-2010-4646) present in versions before 1.01. The issue arises from improper handling of the background attribute within a TABLE cell, related to the use of the htmLawed filter. Documentation from multiple sources (OpenVAS NA...
CVE-2009-4646
CVE-2009-4646 affects the Accellion Secure File Transfer Appliance. The available connected records describe a static code injection vulnerability in the appliance’s administrative web interface that allows remote authenticated administrators to inject arbitrary shell commands by appending them t...
CVE-2008-4646
The CVE concerns the Websense Reporter Module in Websense Enterprise 6.3.2. Affected component: Websense Reporter Module; vulnerability: the SQL database system administrator password is stored in plaintext in CreateDbInstall.log. Root cause: credentials are written to a log file, exposing the pa...
Simple Machines Forum < 1.1.6 Random Number Generator Credentials Disclosure
Binary data 4646.prm...
openSUSE 10 Security Update : libextractor (libextractor-4646)
A buffer overflow in the xpdf code contained in libextractor could be exploited by attackers to potentially execute arbitrary code CVE-2007-4352, CVE-2007-5392, CVE-2007-5393. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...
CVE-2006-4646
CVE-2006-4646 is a cross-site scripting (XSS) vulnerability in the Drupal Pathauto module (Drupal 4.7) before pathauto_node.inc 1.17.2.1 and Drupal 4.6 before pathauto_node.inc 1.14.2.1. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected comp...
CVE-2005-4646
Technical details about CVE-2005-4646 are not provided in the given documents; no affected product, version, or remediation is specified. Monitor for updates.
