68 matches found
CVE-2017-4729
CVE-2017-4729 entry is rejected/not used as stated in the Initial Description.
CVE-2016-4729
WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4731...
CVE-2016-4729
WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4731...
CVE-2016-4729
CVE-2016-4729 affects WebKit in Apple iOS before 10 and Safari before 10, enabling remote code execution or memory corruption via a crafted web site. Root cause involves parsing/memory handling in WebKit leading to memory corruption. Mitigation: apply updates to iOS 10 and Safari 10 (as per Apple...
CVE-2016-4729
WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4731...
SUSE: Security Advisory for java-1_7_0-openjdk (SUSE-SU-2015:1319-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2015:1375-1) (Bar Mitzvah) (Logjam)
java-170-ibm was updated to fix 21 security issues. These security issues were fixed : - CVE-2015-4729: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allowed remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment bsc938895. - CVE-2015-4748:...
Oracle Java SE JRE Multiple Unspecified Vulnerabilities-02 (Jul 2015) - Windows
Oracle Java SE JRE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:jre";...
CVE-2015-4729
CVE-2015-4729 (Oracle Java SE Deployment) is described as an unspecified vulnerability with partial confidentiality and partial integrity impact, and no availability impact. The Connected documents confirm the CVE and show multiple IBM advisories referencing the same CVE family, often listing rem...
phpMyAdmin <= 4.0.4.1 import.php GLOBALS变量注入漏洞
CVECAN ID: CVE-2013-4729 phpmyadmin是MySQL数据库的在线管理工具,主要功能包括在线创建数据表、运行SQL语句、搜索查询数据以及导入导出数据等。 phpMyAdmin 4.0.4.1之前版本内的import.php没有正确限制文件格式定义数据输入权限,可使经过身份验证的远程用户修改GLOBALS超级全局数组,然后通过特制的请求更改配置。 0 phpMyAdmin = 4.0.4.1 厂商补丁: phpMyAdmin ---------- phpMyAdmin已经为此发布了一个安全公告(PMASA-2013-7)以及相应补丁:...
phpMyAdmin 4.x < 4.0.4.1 import.php GLOBALS Variable Injection Configuration Parameter Manipulation (PMASA-2013-7)
According to its self-identified version number, the phpMyAdmin 4.x install hosted on the remote web server is earlier than 4.0.4.1 and, therefore, contains a flaw where the 'import.php' script does not properly sanitize input. This could allow attackers to inject arbitrary GLOBALS variables and...
CVE-2013-4729
import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafted request...
CVE-2013-4729
CVE-2013-4729 affects phpMyAdmin 4.x before 4.0.4.1. The import.php script does not properly restrict input data, allowing remote authenticated users to modify the GLOBALS superglobal and thereby change configuration via a crafted request. The NVD entry assigns CVSSv2 5.5 (AV:N/AC:L/Au:S/C:N/I:P/...
CVE-2012-4729
Wing FTP Server prior to 4.1.1 is vulnerable to an authenticated denial-of-service caused by parsing two ZIP commands, leading to daemon crash. Affected: Wing FTP Server versions before 4.1.1. Root cause: vulnerability arises during processing of multiple ZIP commands. Mitigation: upgrade to vers...
CVE-2011-4729
The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by...
CVE-2011-4729
CVE-2011-4729 : The Parallels Plesk Panel 10.2.0_build1011110331.18 Server Administration Panel fails to set the HTTPOnly flag on cookies (notably those used by login_up.php3 and other files). This exposes cookies to access via client-side scripts, leading to potential disclosure of sensitive inf...
CVE-2010-4729
Zikula
CVE-2009-4729
CVE-2009-4729 affects x10 Adult Media Script 1.7 with multiple XSS flaws. Vulnerable vectors include includes/video_ad.php (pic_id), linkvideos_listing.php (category), templates/header1.php (id), and video_listing.php (key). The flaws allow remote attackers to inject arbitrary web script/HTML, wi...
CVE-2008-4729
CVE-2008-4729 concerns a stack-based buffer overflow in the Hummingbird XWebHostCtrl.1 ActiveX control (hclxweb.dll) used by Hummingbird Xweb ActiveX Control <= 13.0. The overflow is triggered by a too-long PlainTextPassword property, potentially enabling remote arbitrary code execution; note ...