70 matches found
CVE-2016-4704
otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service memory corruption and application crash via unspecified vectors, a different vulnerability than CVE-2016-4705...
Memory corruption
otool in Apple Xcode before 8 allows local users to gain privileges or cause a denial of service memory corruption and application crash via unspecified vectors, a different vulnerability than CVE-2016-4705...
CVE-2016-4705
Apple Xcode 8 and earlier contain memory-corruption vulnerabilities in the otool component that can allow a local attacker to gain privileges or cause a denial of service (application crash). CVE-2016-4704 and CVE-2016-4705 are tied to this issue; Apple indicates these were addressed via memory-h...
Huawei eSap Platform DoS (HWPSIRT-2014-0111)
The remote host is a Huawei device running a firmware version that is affected by a denial of service vulnerability. The issue stems from a heap overflow vulnerability in the firmware. A remote, unauthenticated attacker could exploit this vulnerability by sending malformed packets to cause...
Security Advisory-Heap Overflow Vulnerability in Huawei eSap Platform
Huawei eSap software platform has four heap overflow vulnerabilities. Huawei products that have used this platform are affected. When receiving some special malformed packets, such devices access heap memory that is beyond the valid range and cause unexpected restart of the devices. If an attacke...
CVE-2013-4705
Consolidated details for CVE-2013-4705 show an XSS vulnerability in Opera before version 15.00, exploitable via improper handling of UTF-8 encoding. Affected software: Opera browser (pre-15.00). Root cause (as stated): cross-site scripting due to UTF-8 encoding/validation issues. Impact is descri...
3S Smart Software Solutions CoDeSys Gateway Server Directory Traversal (CVE-2012-4705)
Multiple directory traversal vulnerabilities have been reported in 3S CoDeSys Gateway Server...
3S Smart Software Solutions CoDeSys Gateway Server Directory Traversal
Added: 05/06/2013 CVE: CVE-2012-4705 BID: 59446 OSVDB: 90368 Background Smart Software Solutions GmbH 3S manufactures CoDeSys Gateway Server, a Supervisory Control and Data Acquisition/Human-Machine Interface SCADA/HMI product. The Gateway Server listens on TCP port 1211. Problem 3S CoDeSys Gatew...
CoDeSys Gateway Service < 2.3.9.27 Multiple Vulnerabilities
Binary data scadacodesysgateway23927.nbin...
SCADA 3S CoDeSys Gateway Server Directory Traversal Vulnerability
This Metasploit module exploits a directory traversal vulnerability that allows arbitrary file creation, which can be used to execute a mof file in order to gain remote execution within the SCADA system. This file is part of the Metasploit Framework and may be subject to redistribution and...
SCADA 3S CoDeSys Gateway Server Directory Traversal
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com require 'msf/core' class Metasploit3 'SCADA 3S CoDeSys Gateway Server...
CVE-2012-4705
Affected software: 3S CODESYS Gateway-Server (GATEWAY-SERVER). Vulnerability: Directory traversal that can lead to remote code execution via crafted pathnames; impact per ICS-CERT includes remote execution potential. Root cause / vector: Improper handling of directory traversal in the Gateway-Ser...
CVE-2012-4705
creationtimestamp| type| source ---|---|--- 2013-02-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41712 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/codesysgatewayservertraversal.rb 2025-02-06...
CADA 3S CoDeSys Gateway Server - Directory Traversal (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework http://metasploit.com require 'msf/core' class MetasploitModule 'SCADA 3S CoDeSys Gateway Server Directory Traversal', 'Description' = %q This module exploits a directory...
CVE-2011-4705
CVE-2011-4705 affects the Ming Blacklist Free Android app, versions 1.8.1 and 1.9.2.1. The issue is an inadequate protection of data, enabling remote attackers to read or modify the app’s blacklists and a contacts list through a crafted application that triggers a “data-flow attack.” The availabl...
[SECURITY] [DSA 2165-1] ffmpeg-debian security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2165-1 [email protected] http://www.debian.org/security/ Luciano Bello February 16, 2011 http://www.debian.org/security/faq -...
CVE-2010-4705
Integer overflow in the vorbisresiduedecodeinternal function in libavcodec/vorbisdec.c in the Vorbis decoder in FFmpeg, possibly 0.6, has unspecified impact and remote attack vectors, related to the sizes of certain integer data types. NOTE: this might overlap CVE-2011-0480...
CVE-2010-4705
Integer overflow in the vorbisresiduedecodeinternal function in libavcodec/vorbisdec.c in the Vorbis decoder in FFmpeg, possibly 0.6, has unspecified impact and remote attack vectors, related to the sizes of certain integer data types. NOTE: this might overlap CVE-2011-0480...
CVE-2010-4705
CVE-2010-4705 is described as an integer overflow in the Vorbis decoder of FFmpeg (function vorbis_residue_decode_internal in libavcodec/vorbis_dec.c), with unspecified impact. The CVE may overlap CVE-2011-0480. Debian/OpenVAS entries group this with FFmpeg vulnerabilities and indicate a fix was ...
CVE-2009-4705
CVE-2009-4705 is an XSS vulnerability in the TYPO3 Twitter Search (twittersearch) extension for TYPO3, affecting versions before 0.1.1. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. No exploitation details are provided in the connected documents...