52 matches found
Ubuntu: Security Advisory (USN-1140-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-4707
The checkacl function in pamxauth.c in the pamxauth module in Linux-PAM aka pam 1.1.2 and earlier does not verify that a certain ACL file is a regular file, which might allow local users to cause a denial of service resource consumption via a special file...
CVE-2010-4707
CVE-2010-4707 affects the pam_xauth module of Linux-PAM (pam) in versions 1.1.2 and earlier. The vulnerable code path is in check_acl within pam_xauth.c, where the ACL file is not verified to be a regular file. This can allow local attackers to cause denial of service (resource consumption) by ex...
CVE-2010-4707
The checkacl function in pamxauth.c in the pamxauth module in Linux-PAM aka pam 1.1.2 and earlier does not verify that a certain ACL file is a regular file, which might allow local users to cause a denial of service resource consumption via a special file...
CVE-2010-4707
The checkacl function in pamxauth.c in the pamxauth module in Linux-PAM aka pam 1.1.2 and earlier does not verify that a certain ACL file is a regular file, which might allow local users to cause a denial of service resource consumption via a special file...
CVE-2009-4707
The CVE-2009-4707 entry concerns a Cross-site scripting (XSS) vulnerability in the TYPO3 extension Gobernalia Front End News Submitter (gb_fenewssubmit) version 0.1.0 and earlier. The root cause is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vec...
CVE-2008-4707
CVE-2008-4707 describes a directory traversal vulnerability in the BbZL.PhP 0.92 index.php where an attacker can access unauthorized directories by manipulating the lien_2 parameter (..). The connected records confirm the affected component and the vulnerable parameter, but do not provide concret...
CVE-2007-4707
CVE-2007-4707 concerns Apple QuickTime before 7.3.1, where the Flash media handler contains multiple vulnerabilities that can be exploited by a crafted QuickTime movie to remotely execute arbitrary code. Affected product: QuickTime (Windows and Mac OS X) prior to 7.3.1; vulnerability class is des...
SuSE 10 Security Update : pcre (ZYPP Patch Number 4707)
Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code. CVE-2006-7230 %NASLMINLEVEL 70300 C Tenable...
CVE-2006-4707
CVE-2006-4707 is an XSS vulnerability in MyBB 1.1.7, exploitable through the Admin CP login form (admin/global.php) by supplying malicious input in the query string ($_SERVER[PHP_SELF]). The NVD record notes a CVSS v2 base score of 6.8 (Medium) with impacts to confidentiality, integrity, and avai...
CVE-2005-4707
An XSS vulnerability affects PHP GEN prior to 1.3, allowing remote attackers to inject arbitrary script/HTML via unknown attack vectors. The NVD entry lists a base score of 4.3 (MEDIUM) with Network attack vector, no confidentiality impact, partial integrity impact, and no availability impact. Af...