78 matches found
Textpattern 4.5.5 Cross Site Scripting Vulnerability
Textpattern version 4.5.5 suffers from a cross site scripting vulnerability. Product: Textpattern Vendor: http://textpattern.com/ Vulnerable Versions: 4.5.5 and probably prior Tested Version: 4.5.5 Advisory Publication: July 9, 2014 without technical details Vendor Notification: July 9, 2014 Vend...
Textpattern 4.5.5 Cross Site Scripting
Advisory ID: HTB23223 Product: Textpattern Vendor: http://textpattern.com/ Vulnerable Versions: 4.5.5 and probably prior Tested Version: 4.5.5 Advisory Publication: July 9, 2014 without technical details Vendor Notification: July 9, 2014 Vendor Patch: September 20, 2014 Public Disclosure: October...
Code Aurora多个产品'CONFIG_STRICT_MEMORY_RWX'安全限制绕过漏洞
BUGTRAQ ID: 65630 CVECAN ID: CVE-2013-4737 Code Aurora Forum是Linux基金会协同项目。 Code Aurora多个项目的CONFIGSTRICTMEMORYRWX功能没有正确考虑某些内存区段，在实现中存在安全漏洞，这可使远程攻击者通过固定位置的RWX内存，利用此漏洞绕过目标访问限制。 0 Code Aurora QRD Android Code Aurora Firefox OS for MSM Code Aurora Android for MSM 厂商补丁： Code Aurora -----------...
CVE-2013-4737
The CVE-2013-4737 issue affects the CONFIG_STRICT_MEMORY_RWX implementation in Linux kernel 3.x used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices. The vulnerability arises from not properly considering certain memory sections, enabling bypass of access restrictions v...
[SECURITY] [DSA 2550-2] asterisk regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-2550-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 26, 2012 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2550-1] asterisk security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2550-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 18, 2012 http://www.debian.org/security/faq -...
CVE-2012-4737
channels/chaniax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert7, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 does not enforce ACL rules during certa...
CVE-2011-4737
The CVE-2011-4737 entry affects Parallels Plesk Panel 10.2.0 build 20110407.20. The issue is that a submitted password is included in an HTTP response body (in a path involving client@2/domain@1/odbc/dsn@1/properties/), enabling remote attackers to obtain sensitive information by sniffing network...
CVE-2010-4737
The CVE-2010-4737 entries describe a SQL injection in HotWebScripts HotWeb Rentals, exploitable via the PropResort parameter in resorts.asp. The root cause is unsanitized user input passed to a SQL query, enabling remote command execution/data access as stated across NVD and CVE records. No explo...
CVE-2010-4737
creationtimestamp| type| source ---|---|--- 2010-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15688...
CVE-2009-4737
CVE-2009-4737 corresponds to a stack-based buffer overflow in JustSystems Ichitaro (Ichitaro 13; 2004–2009; Viewer 2009 19.0.1.0 and earlier) triggered by parsing certain Rich Text Files (RTF), specifically related to the phrases pvpara ffooter. The vulnerability allows context-dependent attacker...
Windows 2003 SP1 Detection
Binary data 4737.prm...
CVE-2008-4737
CVE-2008-4737 is an XSS weakness in the WhoDomLite 1.1.3 stack, specifically in the wholite.cgi component. The vulnerability is triggered by user-controlled input in the dom parameter, allowing remote attackers to inject arbitrary web script or HTML. Public references in multiple databases identi...
CVE-2007-4737
CVE-2007-4737 affects the SpeedTech PHP Library (STPHPLibrary) 0.8.0. Affected component: STPHPLIB_DIR handling in PHP files stphpapplication.php, stphpbtnimage.php, and stphpform.php; root cause: remote file inclusion via a URL parameter, enabling arbitrary PHP code execution on a remote attacke...
CVE-2006-4737
SQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject arbitrary web script or HTML via the item parameter. NOTE: The view vector is already covered by CVE-2006-3586.2...
CVE-2006-4737
Jetbox CMS contains an SQL injection in index.php via the item parameter, allowing remote injection of arbitrary web content. The description notes that the view-vector is already covered by CVE-2006-3586, indicating a related vulnerability in the same package. Root cause: unsanitized input used ...
CVE-2005-4737
CVE-2005-4737 affects IBM DB2 Universal Database (UDB) 8.2 before ESE AIX 5765F4100. The issue allows remote authenticated users to cause a denial of service (CPU consumption) by abnormally terminating a connection, which prevents db2agents from being properly cleared. Documentation consistently ...