68 matches found
CVE-2014-4678
The CVE-2014-4678 entry concerns Ansible’s safe_eval function. Version pre-1.6.4 fails to properly restrict the code subset, enabling remote attackers to execute arbitrary code via crafted instructions. This vulnerability is linked to an incomplete fix for CVE-2014-4657 and is described as a remo...
CVE-2017-4678
CVE-2017-4678 is rejected/not used per the description; it does not represent an active vulnerability entry.
CVE-2016-4678
Concretely, CVE-2016-4678 affects Apple’s macOS Sierra 10.12.1 and earlier via the AppleSMC component. The issue allows a local attacker to gain privileges or cause a denial-of-service (NULL pointer dereference) through unspecified vectors. Apple issued a fix in macOS 10.12.1 (Security Update 201...
Apple TV < 10.0.1 Multiple Vulnerabilities
Binary data 9757.prm...
CVE-2015-4678
The CVE-2015-4678 issue is a SQL injection in Persian Car CMS 1.0, exploitable via the cat_id parameter in the default URI. The vulnerability allows remote attackers to execute arbitrary SQL commands, with impact on confidentiality, integrity, and availability as indicated by the NVD entry (CVSSv...
Updated ansible package fixes multiple security issues
Updated ansible package fixes security vulnerabilities: The Ansible platform before version 1.6.7 suffers from input sanitization errors that allow arbitrary code execution as well as information leak, in case an attacker is able to control certain playbook variables CVE-2014-4678, CVE-2014-4966,...
Symantec Backup Exec Server Multiple Vulnerabilities (SYM13-009)
According to its version number, the Symantec Backup Exec Server installed on the remote Windows host is affected by multiple vulnerabilities : - Multiple cross-site scripting vulnerabilities exist in the management console and the beutility console. CVE-2013-4676 - Backup and restore data files...
CVE-2013-4678
CVE-2013-4678 concerns the NDMP protocol implementation in Symantec Backup Exec 2010 R3 (before SP3) and 2012 (before SP2). The issue allows remote authenticated users to obtain sensitive host-version information via unspecified vectors, indicating an information-disclosure risk tied to the NDMP ...
CVE-2012-4678
munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of service disk consumption via many requests to an image with unique parameters...
CVE-2012-4678
munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of service disk consumption via many requests to an image with unique parameters...
CVE-2012-4678
CVE‑2012‑4678 affects munin-cgi-graph in Munin 2.0 rc4. Root cause: it does not delete temporary files, allowing remote attackers to cause DoS via many requests to an image with unique parameters. Public documents do not specify a patch/workaround or explicit exploit details.
CVE-2012-4678
munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of service disk consumption via many requests to an image with unique parameters...
CVE-2012-4678
munin-cgi-graph for Munin 2.0 rc4 does not delete temporary files, which allows remote attackers to cause a denial of service disk consumption via many requests to an image with unique parameters...
CVE-2011-4678
CVE-2011-4678 affects One Click Orgs prior to version 1.2.3. The password reset feature discloses user existence by returning different error messages for failed reset attempts based on whether an email address is registered. This creates a remote account-enumeration risk via successive reset req...
CVE-2010-4678
CVE-2010-4678 affects Cisco ASA 5500 series devices running software before 8.2(3). The issue permits packets to pass before the configuration is loaded, potentially allowing remote attackers to bypass intended access restrictions by sending traffic during device startup. The root cause is the pr...
CVE-2009-4678
Winn Guestbook 2.4 is affected by a Cross-site scripting (XSS) vulnerability in index.php, exploitable via PATH_INFO to inject arbitrary web script or HTML. The provided documents identify the vulnerable component as Winn Guestbook 2.4 (index.php) and the exploit vector PATH_INFO but do not inclu...
CVE-2009-4678
creationtimestamp| type| source ---|---|--- 2009-12-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10653...
CVE-2008-4678
The CVE-2008-4678 issue affects IBM WebSphere Application Server 6.0.2 prior to Fix Pack 6.0.2.31. The HTTP Transport’s HTTP_Request_Parser can be triggered by a long HTTP Host header, causing a denial of service (controller 0C4 abend and application hang). Root cause is a parsing/stack handling ...