58 matches found
CVE-2013-4679
The CVE-2013-4679 entry concerns Symantec Workspace Virtualization, affected when a virtual application layer is enabled. A local privilege escalation exists due to insufficient input sanitization in the interaction with the operating system, allowing a local user to obtain SYSTEM-level privilege...
Symantec Workspace Virtualization Local Kernel Elevation of Privilege
SUMMARY Symantec's Workspace Virtualization, when activated/enabled on a client, is susceptible to a local access kernel elevation of privilege. The application fails to do sufficient bounds checking when passing user input to the underlying operating system. This issue could potentially allow an...
CVE-2012-4679
Cross-site scripting XSS vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script or HTML via the fusername parameter...
CVE-2012-4679
CVE-2012-4679: A cross-site scripting (XSS) vulnerability exists in Newscoop's admin/login.php prior to version 3.5.5, exploitable via the f_user_name parameter to inject arbitrary web script/HTML. The issue stems from insufficient input handling in that parameter, enabling remote attackers to ex...
CVE-2012-4679
creationtimestamp| type| source ---|---|--- 2012-04-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18752...
CVE-2011-4679
vtiger CRM before 5.3.0 does not properly recognize the disabled status of a field in the Leads module, which allows remote authenticated users to bypass intended access restrictions by reading a previously created report...
CVE-2011-4679
vtiger CRM before 5.3.0 does not properly recognize the disabled status of a field in the Leads module, which allows remote authenticated users to bypass intended access restrictions by reading a previously created report...
CVE-2011-4679
CVE-2011-4679 affects vtiger CRM prior to 5.3.0. The issue: the Leads module fails to properly recognize a field’s disabled status, allowing remote authenticated users to bypass access restrictions by reading a previously created report. Affected product/version: vtiger CRM
CVE-2010-4679
CVE-2010-4679 affects Cisco ASA 5500 series devices running software before 8.2(3). The root cause is improper handling of OCSP connection failures, which can be triggered by remote OCSP responders and leads to denial of service via TCP socket exhaustion. The entry attributes this to Bug ID CSCsz...
CVE-2009-4679
Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...
CVE-2009-4679
creationtimestamp| type| source ---|---|--- 2009-12-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10754 2009-12-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33440...
SuSE 10 Security Update : openldap2 (ZYPP Patch Number 4679)
This update fixes multiple flaws that could cause slapd to crash. CVE-2007-5707 / CVE-2007-5708 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29536;...
CVE-2007-4679
CFFTP in CFNetwork for Apple Mac OS X 10.4 through 10.4.10 allows remote FTP servers to force clients to connect to other hosts via crafted responses to FTP PASV commands...
CVE-2007-4679
CVE-2007-4679 affects Apple Mac OS X 10.4–10.4.10 via CFNetwork’s FTP implementation. Remote FTP servers can craft PASV responses to cause the client to connect to an attacker‑controlled host. Impact: partial integrity, no confidentiality or availability impact stated; exploit requires network ac...
Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)
The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...
CVE-2006-4679
DokuWiki prior to 2006-03-09c is vulnerable: it enables the debug feature by default, allowing remote attackers to obtain sensitive information via doku.php when the X-DOKUWIKI-DO header is set to "debug". The issue is confirmed across multiple sources (NVD/OpenVAS/Gentoo GLSA). A remediation bar...
CVE-2005-4679
This CVE affects Internet Explorer 6 for Windows XP SP2 . The vulnerability allows remote attackers to spoof the URL in the status bar by abusing the title attribute of an image linked to a trusted site within a form, leading to potential user deception. The description does not specify affected ...