CVE-2016-4736

CVE-2016-4736 : Apple OS X libarchive before 10.12 is affected. A crafted file can trigger memory corruption, leading to a denial of service (and potentially other impact). Affected component: libarchive in OS X. Root cause: memory corruption via crafted archive handling. Mitigation: apply the ma...

SUSE: Security Advisory for java-1_7_0-openjdk (SUSE-SU-2015:1319-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical: Red Hat Security Advisory: java-1.7.0-ibm security update

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 Supplementary. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Oracle Java SE JRE Multiple Unspecified Vulnerabilities-02 (Jul 2015) - Windows

Oracle Java SE JRE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:jre";...

CVE-2015-4736

CVE-2015-4736 is described as an unspecified vulnerability in the Deployment component of Oracle Java SE 7u80 and 8u45, with impact to confidentiality, integrity, and availability. The connected IBM advisories corroborate the CVE across multiple IBM Java SDK-related products and state remediation...

SQL Injection in Е2

Advisory ID: HTB23222 Product: Е2 Vendor: Ilya Birman Vulnerable Versions: v2844 and probably prior Tested Version: v2844 Advisory Publication: July 2, 2014 without technical details Vendor Notification: July 2, 2014 Vendor Patch: July 3, 2014 Public Disclosure: July 23, 2014 Vulnerability Type:...

CVE-2014-4736

CVE-2014-4736 describes an SQL injection in E2 before 2.4 (2845) via the note-id parameter to /@actions/comment-process. The root cause is insufficient input sanitization, allowing remote attackers to inject arbitrary SQL commands, potentially adding/modifying/deleting records or gaining site acc...

E2 2844 SQL Injection Vulnerability

E2 version 2844 suffers from a remote SQL injection vulnerability. Product: Е2 Vendor: Ilya Birman Vulnerable Versions: v2844 and probably prior Tested Version: v2844 Advisory Publication: July 2, 2014 without technical details Vendor Notification: July 2, 2014 Vendor Patch: July 3, 2014 Public...

CVE-2014-4736

creationtimestamp| type| source ---|---|--- 2014-07-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39267...

E2 2844 SQL Injection

Advisory ID: HTB23222 Product: Е2 Vendor: Ilya Birman Vulnerable Versions: v2844 and probably prior Tested Version: v2844 Advisory Publication: July 2, 2014 without technical details Vendor Notification: July 2, 2014 Vendor Patch: July 3, 2014 Public Disclosure: July 23, 2014 Vulnerability Type:...

CVE-2013-4736

CVE-2013-4736 concerns multiple integer overflows in the JPEG engine drivers of the MSM camera stack used with Linux kernel 2.6.x/3.x, as part of Qualcomm QuIC Android contributions for MSM devices. The vulnerability arises during handling of ioctl command payloads in various components (camera_v...

Sophos Safeguard Enterprise本地安全限制绕过漏洞(CVE-2012-4736)

BUGTRAQ ID: 59311 CVECAN ID: CVE-2012-4736 Sophos Safeguard Enterprise是磁盘加密解决方案。 SafeGuard Enterprise 6.0 及其他版本内的Device Encryption Client组件存在安全漏洞，该漏洞源于启用基于卷的加密策略并使用用户定义的密钥时，组件没有正确地阻止使用exFAT USB闪存盘，本地用户可利用此漏洞通过多次removal和reattach操作，绕过目标访问限制并复制敏感信息到设备。 0 Sophos Safeguard Enterprise 厂商补丁： Sophos ----...

CVE-2012-4736

CVE-2012-4736 affects Sophos SafeGuard Enterprise 6.0: Device Encryption Client fails to block exFAT USB drives when a volume-based policy is enabled with a user-defined key, enabling local users to copy data by removing/reattaching drives. Root cause: improper enforcement of encryption policy fo...

CVE-2011-4736

The CVE-2011-4736 issue affects Parallels Plesk Panel (Control Panel) version 10.2.0 build 20110407.20, where cleartext passwords are transmitted over HTTP in login_up.php3 and related files. Root cause: credentials sent unencrypted, enabling network sniffing. Impact is limited to exposed authent...

CVE-2010-4736

GateSoft DocuSafe 4.1.0 and 4.1.2 are affected by an SQL injection in ECO.asp, exploitable via the ECO_ID parameter. Multiple sources (NVD, OpenVAS) corroborate a vulnerability allowing remote execution of arbitrary SQL commands through that parameter. The underlying issue is a flaw in input hand...

CVE-2010-4736

creationtimestamp| type| source ---|---|--- 2010-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15686...

CVE-2009-4736

The CVE-2009-4736 entry describes a Cross-site scripting (XSS) vulnerability in CommonSense CMS 5.0 . The issue is triggered in the search.php script via the q parameter, allowing remote attackers to inject arbitrary web script or HTML. The description does not specify affected versions beyond 5....

CVE-2008-4736

creationtimestamp| type| source ---|---|--- 2008-09-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6589...

CVE-2007-4736

Technical details about CVE-2007-4736 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2006-4736

The CVE-2006-4736 entry describes multiple SQL injection vulnerabilities in index.php of CMS.R. 5.5, allowing remote attackers to execute arbitrary SQL commands via the adminname and adminpass parameters. The root cause is SQL injection in the affected PHP script, leading to potential data exposu...