62 matches found
CVE-2012-4724
CVE-2012-4724 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2016-4724
IOAcceleratorFamily in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause a denial of service NULL pointer dereference via a crafted app...
CVE-2016-4724
IOAcceleratorFamily in Apple iOS before 10 and macOS before 10.12 allows a crafted app to execute arbitrary code in kernel context or cause a denial of service via a NULL pointer dereference. The issue is attributed to a validation problem in the handling of input; Apple’s security content for HT...
Fedora Update for moodle FEDORA-2015-4724
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-4724
The CVE-2014-4724 entry affects the WordPress plugin Custom Banners 1.2.2.2 . The vulnerability is an XSS issue where an attacker can inject arbitrary script/HTML via the parameter custom_banners_registered_name sent to wp-admin/options.php . This could allow remote, unauthenticated or authentica...
CVE-2013-4724
DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to...
CVE-2013-4724
CVE-2013-4724 affects DDSN Interactive cm3 Acora CMS versions including 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1 (and possibly others). The issue is failure to set the HTTPOnly flag on a Set-Cookie header for an unspecified cookie, potentially allowing remote attackers to access sensitive cooki...
CVE-2010-4724
CVE-2010-4724 concerns multiple unspecified vulnerabilities in the parser implementation of the Smarty template engine, affecting versions before 3.0.0 RC3. The available sources describe the issues as having unknown impact and remote attack vectors, with no concrete exploitation details or remed...
CVE-2009-4724
CVE-2009-4724 describes an SQL injection in shop.htm of the PPScript (PaymentProcessorScript.net). The vulnerability arises from unsafely handling the cid parameter, enabling remote attackers to execute arbitrary SQL commands. Affected component is the PPScript web interface (shop.htm); root caus...
CVE-2009-4724
creationtimestamp| type| source ---|---|--- 2009-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34493 2009-08-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9351...
Trend Micro OfficeScan HTTP Request Buffer Overflow
Binary data 4724.prm...
CVE-2008-4724
Multiple cross-site scripting XSS vulnerabilities in Google Chrome 0.2.149.30 allow remote attackers to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a 1 JPG, 2 PDF, or 3 TXT file. NOTE: the provenance of this information is unknown; the details are obtained...
CVE-2007-4724
Cross-site request forgery CSRF vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters...
CVE-2007-4724
Cross-site request forgery CSRF vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters...
CVE-2007-4724
CVE-2007-4724 describes a CSRF vulnerability in the Apache Tomcat calendar examples app, specifically in the file cal2.jsp of the calendar example. The issue allows a remote attacker to add events as arbitrary users by supplying the time and description parameters, enabling unauthorized calendar ...
CVE-2007-4724
Cross-site request forgery CSRF vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attackers to add events as arbitrary users via the time and description parameters...
CVE-2006-4724
CVE-2006-4724 affects the Flash Remoting Gateway of Adobe ColdFusion MX 7 and 7.01. The vulnerability allows remote attackers to cause a denial of service (infinite loop) via crafted, unspecified vectors. The available documents do not provide concrete exploit details, specific affected versions ...
CVE-2005-4724
PhpTagCool 1.0.3 contains an SQL injection in post.php, exploitable via the X-Forwarded-For HTTP header, allowing remote SQL command execution. The vulnerability’s impact is described as partial confidentiality, integrity, and availability loss. No explicit exploit code or in-the-wild details are...