Lucene search
+L

68 matches found

CVE
CVE
added 2018/03/16 2:4 p.m.28 views

CVE-2017-4729

CVE-2017-4729 entry is rejected/not used as stated in the Initial Description.

7.3AI score
SaveExploits0
Cvelist
Cvelist
added 2018/03/16 2:4 p.m.10 views

CVE-2017-4729

...

SaveExploits0
NVD
NVD
added 2016/09/25 10:59 a.m.14 views

CVE-2016-4729

WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4731...

9.3CVSS8.8AI score0.02729EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2016/09/25 10:59 a.m.20 views

CVE-2016-4729

WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4731...

9.3CVSS7.5AI score0.02729EPSS
SaveExploits0References2
CVE
CVE
added 2016/09/25 10:0 a.m.73 views

CVE-2016-4729

CVE-2016-4729 affects WebKit in Apple iOS before 10 and Safari before 10, enabling remote code execution or memory corruption via a crafted web site. Root cause involves parsing/memory handling in WebKit leading to memory corruption. Mitigation: apply updates to iOS 10 and Safari 10 (as per Apple...

9.3CVSS8.7AI score0.02729EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
added 2016/09/25 10:0 a.m.23 views

CVE-2016-4729

WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4731...

8.8AI score0.02729EPSS
SaveExploits0References6
OpenVAS
OpenVAS
added 2015/10/16 12:0 a.m.41 views

SUSE: Security Advisory for java-1_7_0-openjdk (SUSE-SU-2015:1319-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.6AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2015/08/13 12:0 a.m.42 views

SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2015:1375-1) (Bar Mitzvah) (Logjam)

java-170-ibm was updated to fix 21 security issues. These security issues were fixed : - CVE-2015-4729: Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allowed remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment bsc938895. - CVE-2015-4748:...

10CVSS7.3AI score0.9986EPSS
SaveExploits1References45
OpenVAS
OpenVAS
added 2015/07/20 12:0 a.m.44 views

Oracle Java SE JRE Multiple Unspecified Vulnerabilities-02 (Jul 2015) - Windows

Oracle Java SE JRE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:jre";...

9.3CVSS5.8AI score0.04455EPSS
SaveExploits0References6
CVE
CVE
added 2015/07/16 10:0 a.m.114 views

CVE-2015-4729

CVE-2015-4729 (Oracle Java SE Deployment) is described as an unspecified vulnerability with partial confidentiality and partial integrity impact, and no availability impact. The Connected documents confirm the CVE and show multiple IBM advisories referencing the same CVE family, often listing rem...

4CVSS3.9AI score0.02698EPSS
SaveExploits0References12Affected Software2
seebug.org
seebug.org
added 2013/07/10 12:0 a.m.55 views

phpMyAdmin <= 4.0.4.1 import.php GLOBALS变量注入漏洞

CVECAN ID: CVE-2013-4729 phpmyadmin是MySQL数据库的在线管理工具,主要功能包括在线创建数据表、运行SQL语句、搜索查询数据以及导入导出数据等。 phpMyAdmin 4.0.4.1之前版本内的import.php没有正确限制文件格式定义数据输入权限,可使经过身份验证的远程用户修改GLOBALS超级全局数组,然后通过特制的请求更改配置。 0 phpMyAdmin = 4.0.4.1 厂商补丁: phpMyAdmin ---------- phpMyAdmin已经为此发布了一个安全公告(PMASA-2013-7)以及相应补丁:...

5.5CVSS6.4AI score0.01055EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2013/07/10 12:0 a.m.24 views

phpMyAdmin 4.x < 4.0.4.1 import.php GLOBALS Variable Injection Configuration Parameter Manipulation (PMASA-2013-7)

According to its self-identified version number, the phpMyAdmin 4.x install hosted on the remote web server is earlier than 4.0.4.1 and, therefore, contains a flaw where the 'import.php' script does not properly sanitize input. This could allow attackers to inject arbitrary GLOBALS variables and...

5.5CVSS8.4AI score0.01055EPSS
SaveExploits2References2
OSV
OSV
added 2013/07/04 2:33 p.m.11 views

CVE-2013-4729

import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafted request...

5.9AI score
SaveExploits0References3
CVE
CVE
added 2013/07/04 10:0 a.m.72 views

CVE-2013-4729

CVE-2013-4729 affects phpMyAdmin 4.x before 4.0.4.1. The import.php script does not properly restrict input data, allowing remote authenticated users to modify the GLOBALS superglobal and thereby change configuration via a crafted request. The NVD entry assigns CVSSv2 5.5 (AV:N/AC:L/Au:S/C:N/I:P/...

5.5CVSS6AI score0.01055EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2012/10/26 10:0 a.m.49 views

CVE-2012-4729

Wing FTP Server prior to 4.1.1 is vulnerable to an authenticated denial-of-service caused by parsing two ZIP commands, leading to daemon crash. Affected: Wing FTP Server versions before 4.1.1. Root cause: vulnerability arises during processing of multiple ZIP commands. Mitigation: upgrade to vers...

6.8CVSS6.4AI score0.02195EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2011/12/16 11:0 a.m.29 views

CVE-2011-4729

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by...

6.1AI score0.0116EPSS
SaveExploits0References2
CVE
CVE
added 2011/12/16 11:0 a.m.46 views

CVE-2011-4729

CVE-2011-4729 : The Parallels Plesk Panel 10.2.0_build1011110331.18 Server Administration Panel fails to set the HTTPOnly flag on cookies (notably those used by login_up.php3 and other files). This exposes cookies to access via client-side scripts, leading to potential disclosure of sensitive inf...

5CVSS6.3AI score0.0116EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2011/02/08 9:0 p.m.47 views

CVE-2010-4729

Zikula

6.8CVSS7.2AI score0.00524EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2010/03/18 6:0 p.m.58 views

CVE-2009-4729

CVE-2009-4729 affects x10 Adult Media Script 1.7 with multiple XSS flaws. Vulnerable vectors include includes/video_ad.php (pic_id), linkvideos_listing.php (category), templates/header1.php (id), and video_listing.php (key). The flaws allow remote attackers to inject arbitrary web script/HTML, wi...

4.3CVSS5.9AI score0.03631EPSS
SaveExploits1References7Affected Software1
CVE
CVE
added 2008/10/23 10:0 p.m.53 views

CVE-2008-4729

CVE-2008-4729 concerns a stack-based buffer overflow in the Hummingbird XWebHostCtrl.1 ActiveX control (hclxweb.dll) used by Hummingbird Xweb ActiveX Control &lt;= 13.0. The overflow is triggered by a too-long PlainTextPassword property, potentially enabling remote arbitrary code execution; note ...

6.8CVSS8.2AI score0.06898EPSS
SaveExploits2References5Affected Software2
Rows per page
Query Builder