100 matches found
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-4670, CVE-2010-4671. Reason: This candidate is a duplicate of CVE-2010-4670 and CVE-2010-4671. Notes: All CVE users should reference CVE-2010-4670 and/or CVE-2010-4671 instead of this candidate. All references and description...
CVE-2011-4671
SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter aka redirect URL...
CVE-2011-4671
CVE-2011-4671 affects the WordPress AdRotate plugin, specifically the file adrotate-out.php. The SQL injection vulnerability exists in version 3.6.6 and earlier than 3.6.8, allowing remote attackers to execute arbitrary SQL commands through the track parameter (redirect URL). Connected sources co...
CVE-2011-4671
SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter aka redirect URL...
CVE-2011-4671
creationtimestamp| type| source ---|---|--- 2011-09-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17888 2011-11-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18114...
ICMPv6 Router Announcement flooding denial of service affecting multiple systems
This security advisory is released because Microsoft doesnt want to fix the issue. Cisco did for its IOS and ASA within 3 months. Title: ICMPv6 Router Announcement flooding denial of service affecting multiple systems Date: 05 April 2011 URL:...
CVE-2010-4671
The CVE-2010-4671 entry concerns Cisco IOS IPv6 Neighbor Discovery, where the ND implementation can be overwhelmed by a flood of Router Advertisements with spoofed sources, causing CPU exhaustion and device hang. Affected product: Cisco IOS pre-15.0(1)XA5. Trigger: RA flood using tools like flood...
CVE-2009-4671
CVE-2009-4671 affects RoomPHPlanning 1.6. Login.php accepts a room_phplanning cookie value tied to the admin account, enabling remote authentication bypass and administrative access. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and no authentication required; impact i...
CVE-2009-4671
Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the roomphplanning cookie to a value associated with the admin account...
CVE-2009-4671
creationtimestamp| type| source ---|---|--- 2009-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8797...
CVE-2008-4671
WordPress MU (WPMU)
CVE-2008-4671
Cross-site scripting XSS vulnerability in wp-admin/wp-blogs.php in Wordpress MU WPMU before 2.6 allows remote attackers to inject arbitrary web script or HTML via the 1 s and 2 ipaddress parameters...
CVE-2008-4671
creationtimestamp| type| source ---|---|--- 2008-09-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32444...
openSUSE 10 Security Update : libpurple (libpurple-4671)
This update fixes a crash in pidgin when specifying invalid HMTL. CVE-2007-4999 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libpurple-4671. The text description of this plugin is C SUSE LL...
Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)
The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...
CVE-2007-4671
The CVE-2007-4671 issue affects Safari on Mac OS X (10.4–10.4.10) and Windows, plus iPhone 1.1.1. A crafted HTTP page can cause Javascript to affect HTTPS content from the same domain, enabling an attacker to alter or access HTTPS-protected pages. Root cause is a cross-page/script interaction bet...
CVE-2006-4671
CVE-2006-4671 is a PHP remote file inclusion in Fantastic News 2.1.4 (and possibly earlier) that lets an attacker execute arbitrary PHP code by supplying a URL to CONFIG[script_path] in headlines.php. This is a different vector from CVE-2006-1154. Affected product/version: Fantastic News 2.1.4 (a...
CVE-2005-4671
Technical details about CVE-2005-4671 are not publicly available in the provided connected documents. Monitor for updates.
