168 matches found
Debian DSA-4673-1 : tomcat8 - security update
Several vulnerabilities were discovered in the Tomcat servlet and JSP engine, which could result in HTTP request smuggling and code execution in the AJP connector disabled by default in Debian. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
CVE-2017-4673
CVE-2017-4673 entry is rejected/not used per initial description.
Cross site scripting
Multiple Cross Site Scripting XSS Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via 1 profiledesc, aboutme, schools, occupation, companies, hobbies, favmovies, favmusic, favbooks parameters to ProfileSettings page; 2 note...
CVE-2015-4673
CVE-2015-4673 (ClipBucket) involves multiple XSS vulnerabilities in ClipBucket 2.7.0.5, where authenticated users can inject arbitrary scripts/HTML via (1) collection_description in upload/manage_collections.php (add_new action) and (2) photo_description, (3) photo_tags, or (4) photo_title in upl...
CVE-2016-4673
CVE-2016-4673 (Apple CoreGraphics JPEG bug) affects multiple Apple OSes: iOS before 10.1, macOS before 10.12.1, tvOS before 10.0.1, watchOS before 3.1. A memory corruption issue in CoreGraphics may allow arbitrary code execution or memory corruption leading to a crash when processing a crafted JP...
About the security content of iOS 10.1 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
Apple TV < 10.0.1 Multiple Vulnerabilities
Binary data 9757.prm...
CVE-2016-4673
creationtimestamp| type| source ---|---|--- 2016-10-25 15:15:37+00:00| seen| https://t.me/alexmakus/769 2026-07-26 07:02:19+00:00| seen| https://t.me/KaitNews/499 2026-07-27 00:01:56+00:00| seen| https://t.me/KaitNews/499...
About the security content of iOS 10.1
About the security content of iOS 10.1 This document describes the security content of iOS 10.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...
About the security content of tvOS 10.0.1
About the security content of tvOS 10.0.1 This document describes the security content of tvOS 10.0.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of watchOS 3.1
About the security content of watchOS 3.1 This document describes the security content of watchOS 3.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
CVE-2013-4673
The CVE-2013-4673 issue affects Symantec Web Gateway (SWG) prior to version 5.1.1 where the management console’s RADIUS authentication is not properly implemented, allowing remote attackers with access to the login prompt to execute arbitrary code. Connected advisories confirm the root cause as a...
CVE-2012-4673
CVE-2012-4673 refers to a SQL injection vulnerability in NeoInvoice, specifically in application/controllers/invoice.php where the sort_col parameter in list_items can be manipulated to cause arbitrary SQL execution. This vulnerability is described as a separate issue from CVE-2012-3477. The link...
CVE-2011-4673
CVE-2011-4673 affects the WordPress Jetpack plugin, specifically the modules/sharedaddy.php component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the id parameter, indicating a SQL injection in that file. The issue is tied to the Jetpack plugin for WordPress a...
CVE-2010-4673
Cisco ASA 5500 series devices running software 8.2(4) and earlier are affected by CVE-2010-4673. The issue permits remote attackers to cause a denial-of-service through a flood of packets (Bug ID CSCtg06316). The affected component is the ASA software handling packet traffic on 8.2(4) and earlier...
CVE-2009-4673
CVE-2009-4673 concerns a SQL injection in profile.php of the Mole Group Adult Portal Script, exploitable via the user_id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands (impact: partial confidentiality, integrity, and availability according to NVD). Public r...
Apple QuickTime Plug-In Security Bypass (CVE-2006-4965; CVE-2007-4673)
Apple QuickTime is a multimedia player that supports a wide range of media formats. The software supports parsing and displaying still image files as well as numerous audio and video formats. It also provides libraries and plugins for other applications, such as browsers, to read QuickTime media...
CVE-2009-4673
creationtimestamp| type| source ---|---|--- 2009-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8788...
CVE-2008-4673
PHP remote file inclusion vulnerability in panel/common/theme/default/headersetup.php in WebBiscuits Software Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the 1 pathdocroot and 2 component parameters...