CVE-2014-4690

PfSense is vulnerable to CVE-2014-4690 (and related listed CVEs) due to multiple directory traversal flaws present in pfSense prior to version 2.1.4. Specifically, an attacker can read arbitrary .info files via a crafted path to pkg_mgr_install.php (pkg parameter) and read arbitrary files via the...

CVE-2014-0361

The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified cryptanalysis of an ADXCSOUF.DAT...

Default configuration

The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified cryptanalysis of an ADXCSOUF.DAT...

CVE-2014-0361

The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified cryptanalysis of an ADXCSOUF.DAT...

CVE-2014-0361

CVE-2014-0361 applies to IBM 4690 OS (used by Toshiba Global Commerce Solutions 4690 POS and related products). The issue stems from the ADXCRYPT password-hashing algorithm, which is vulnerable to known-plaintext attacks and hash collisions, enabling context-dependent attackers to obtain or deduc...

Toshiba Global Commerce Solutions' 4690 Point of Sale operating system contains a password hashing algorithm that can be reversed

Overview Toshiba Global Commerce Solutions' 4690 Point of Sale operating system contains a password hashing algorithm that can be reversed. CWE-328 Description Toshiba Global Commerce Solutions' 4690 Point of Sale operating system contains a password hashing algorithm that can be reversed. CWE-32...

Oracle Linux 5 : lynx (ELSA-2008-0965)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2008-0965 advisory. - add patch for CVE-2008-4690 rhbz468184 - prompt user before executing commands from the lynxcgi: handler, even in the advanced user mode - mark all...

CVE-2013-4690

CVE-2013-4690 describes a memory-padding initialization flaw in Juniper Junos OS on SRX1400/3400/3600 platforms (versions listed) that can leak sensitive data by reading Ethernet-packet padding. The root cause is improper initialization of memory locations used during padding, enabling remote att...

CVE-2012-4690

The CVE-2012-4690 vulnerability affects Rockwell Automation Allen-Bradley MicroLogix devices (1100/1200/1400/1500) and the SLC 500 and PLC‑5 controller platforms. When Static status is not enabled, attackers can remotely send crafted messages that modify status bits, causing the controller to fau...

Fedora Update for openstack-keystone FEDORA-2012-4690

Check for the Version of openstack-keystone OpenVAS Vulnerability Test Fedora Update for openstack-keystone FEDORA-2012-4690 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Scientific Linux Security Update : lynx on SL3.x, SL4.x, SL5.x i386/x86_64

An arbitrary command execution flaw was found in the Lynx 'lynxcgi:' URI handler. An attacker could create a web page redirecting to a malicious URL that could execute arbitrary code as the user running Lynx in the non-default 'Advanced' user mode. CVE-2008-4690 Note: In these updated lynx...

Opera Cache History Information Disclosure Vulnerability (Linux)

The host is installed with Opera and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gboperacachehistoryinfodiscvulnlin.nasl 5999 2017-04-21 09:02:32Z teissa $ Opera Cache History Information Disclosure Vulnerability Linux Authors: Rachana Shetty Copyright:...

CVE-2011-4690

Opera 11.60 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code...

CVE-2010-4690

The issue concerns Cisco ASA 5500 series devices’ Mobile User Security (MUS) service. Vulnerable component: MUS, which does not properly authenticate HTTP requests from a Web Security appliance (WSA). Root cause: improper authentication may allow an attacker to obtain sensitive information via a ...

CVE-2009-4690

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...

CVE-2009-4690

The CVE-2009-4690 entry concerns YourFreeWorld Programs Rating Script with two XSS vulnerabilities. Affected component: rating functionality that reads the id parameter in rate.php and postcomments.php. Root cause: reflected cross-site scripting that allows remote attackers to inject arbitrary we...

Gentoo Security Advisory GLSA 200909-15 (lynx)

The remote host is missing updates announced in advisory GLSA 200909-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

openSUSE Security Update : lynx (lynx-275)

This update of lynx fixes a security bug that can be exploited by remote attackers to execute arbitrary commands when advanced mode is enabled and lynx is used as URL handler CVE-2008-4690 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

CVE-2009-4690

creationtimestamp| type| source ---|---|--- 2009-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33098 2009-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33097...

Mandriva Linux Security Advisory : lynx (MDVSA-2008:218)

A vulnerability was found in the Lynxcgi: URI handler that could allow an attacker to create a web page redirecting to a malicious URL that would execute arbitrary code as the user running Lynx, if they were using the non-default Advanced user mode CVE-2008-4690. This update corrects these issues...