58 matches found
3S CoDeSys Gateway Server Crafted Packet Stack Overflow
Added: 04/29/2013 CVE: CVE-2012-4708 BID: 58032 OSVDB: 90371 Background Smart Software Solutions GmbH 3S manufactures CoDeSys Gateway Server, a Supervisory Control and Data Acquisition/Human-Machine Interface SCADA/HMI product. The Gateway Server listens on TCP port 1211. Problem 3S CoDeSys Gatew...
CoDeSys Gateway Service < 2.3.9.27 Multiple Vulnerabilities
Binary data scadacodesysgateway23927.nbin...
CVE-2012-4708
The CVE-2012-4708 issue affects 3S CODESYS Gateway-Server (pre-2.3.9.27). The vulnerability is a stack-based buffer overflow triggered by a crafted packet sent to the Gateway Server (port 1211), allowing remote code execution and potentially full control of the affected system. Public details ind...
CVE-2011-4708
CVE-2011-4708 affects IBM Rational Asset Manager prior to 7.5.1. It is a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Concrete affected product/version is stated; exploit details and root-cause mechanism...
CVE-2010-4708
The pamenv module in Linux-PAM aka pam 1.1.2 and earlier reads the .pamenvironment file in a user's home directory, which might allow local users to run programs with an unintended environment by executing a program that relies on the pamenv PAM check...
CVE-2010-4708
The pamenv module in Linux-PAM aka pam 1.1.2 and earlier reads the .pamenvironment file in a user's home directory, which might allow local users to run programs with an unintended environment by executing a program that relies on the pamenv PAM check...
CVE-2010-4708
CVE-2010-4708 affects Linux-PAM (pam) up to version 1.1.2, with the pam_env module reading a user’s .pam_environment file and potentially allowing local users to run programs with an unintended environment. Connected sources corroborate the vulnerability in pam_env and indicate the affected range...
Mac OS X Security Update 2007-009
The remote host is missing Security Update 2007-009. One or more of the following components are affected: Address Book CFNetwork ColorSync Core Foundation CUPS Desktop Services Flash Player Plug-in GNU Tar iChat IO Storage Family Launch Services Mail perl python Quick Look ruby Safari Safari RSS...
CVE-2009-4708
The CVE-2009-4708 entry concerns a SQL injection vulnerability in the Gobernalia Front End News Submitter (gb_fenewssubmit) TYPO3 extension, affected up to version 0.1.0. The root cause is an injectable SQL path via unspecified vectors, allowing remote attackers to execute arbitrary SQL commands....
CVE-2008-4708
CVE-2008-4708 affects BbZL.PhP 0.92. An attacker can bypass authentication and gain administrative access by setting the phorum_admin_session cookie to 1. The issue enables remote, unauthenticated exploitation leading to full admin privileges. No patch details are provided in the supplied documen...
CVE-2008-4708
creationtimestamp| type| source ---|---|--- 2008-09-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6621...
Apple Mac OS X v10.5.1 2007-009 Multiple Security Vulnerabilities
CVE-2007-4708 CVE-2007-4709 CVE-2007-4710 CVE-2007-5847 CVE-2007-5848 CVE-2007-5849 CVE-2007-5850 CVE-2007-5851 CVE-2007-5853 CVE-2007-5854 CVE-2007-5855 CVE-2007-5856 CVE-2007-5857 CVE-2007-5859 CVE-2007-5876 CVE-2007-5860 CVE-2007-5861 These issues affect Mac OS X and various applications,...
CVE-2007-4708
CVE-2007-4708 is a format-string vulnerability in the Address Book component of Apple Mac OS X 10.4.11 that allows remote code execution via the URL handler. Public sources confirm the flaw affects Mac OS X 10.4.11 (and related Address Book/URL handling paths) and indicate that exploitation could...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 id, 2 f, 3 quote, and 4 act parameters to cp.php; the 5 u parameter to user.php; the 6 f parameter to post.php; the 7 s parameter to topic.php; the 8 quot...
CVE-2006-4708
Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the 1 act parameter in a help.php and b search.php, and the 2 p parameter in report.php...
CVE-2006-4708
CVE-2006-4708 documents XSS vulnerabilities in Vikingboard. Affected software: Vikingboard 0.1b (also referenced as 0.1b in NVD records). Vulnerable parameters: the act parameter in help.php and search.php, and the p parameter in report.php, which can be exploited to inject arbitrary web script o...
CVE-2005-4708
The CVE-2005-4708 entry concerns Adobe Macromedia MX 2004 products, Captivate, Contribute 2/3, and the eLicensing client. The vulnerability arises from the Macromedia Licensing Service being installed with the Users group allowed to configure the service, including the path to the executable. Thi...