94 matches found
CVE-2013-4738
Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to gain privileges via 1 a crafted VIDIOCMSMVPEDEQUEUESTREAMBUFFINFO ioctl call, related to...
CVE-2013-4738
The CVE-2013-4738 entry concerns the MSM camera driver in Linux kernel 3.x (QuIC Android contributions and related products). It describes multiple stack-based buffer overflows that could enable privilege escalation when an attacker issues crafted IOCTLs: VIDIOC_MSM_VPE_DEQUEUE_STREAM_BUFF_INFO a...
CVE-2013-4738
Multiple stack-based buffer overflows in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allow attackers to gain privileges via 1 a crafted VIDIOCMSMVPEDEQUEUESTREAMBUFFINFO ioctl call, related to...
CVE-2009-4738
CVE-2009-4738 corresponds to a screen-lock bypass in JustSystems ATOK (2006–2009) and ATOK Smile/Just Smile 4, caused by issues with restricting launching external applications. The vulnerability allows physically proximate users to bypass the screen lock and execute commands with system privileg...
CVE-2011-4738
The CVE-2011-4738 entry describes a vulnerability in Parallels Plesk Panel 10.2.0 build 20110407.20 where the HTTPOnly flag is missing on a Set-Cookie header. This absence allows remote attackers to access cookie values via script, potentially exposing sensitive information such as data used by g...
CVE-2010-4738
The CVE-2010-4738 entry applies to Rae Media INC Real Estate Single and Multi Agent System 3.0. The underlying issue is SQL injection in two web interfaces: multi/city.asp (Multi Agent System) and resulttype.asp (Single Agent System), exploitable via the probe parameter. This allows remote attack...
CVE-2010-4738
creationtimestamp| type| source ---|---|--- 2011-02-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16178 2011-02-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16179...
Windows 2003 (No Service Pack) Detection
Binary data 4738.prm...
CVE-2008-4738
The provided sources document a SQL injection vulnerability in gallery.php of MyCard 1.0.2, exploitable via the id parameter and allowing remote attackers to execute arbitrary SQL commands. The affected component is the gallery.php script within MyCard 1.0.2. No remediation or patched versions ar...
CVE-2008-4738
creationtimestamp| type| source ---|---|--- 2008-09-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6603...
CVE-2007-4738
CVE-2007-4738 describes multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0. An attacker can trigger arbitrary PHP code execution by supplying a URL in the db_conf or ADODB_DIR parameter to utils/stphpimage_show.php, or by supplying a URL in the STPHPL...
CVE-2006-4738
CVE-2006-4738 describes a PHP remote file inclusion in Jetbox CMS, specifically in phpthumb.php, allowing an attacker to execute arbitrary PHP code via a URL supplied to the includes_path parameter. The entry notes that the related relative_script_path vector is already covered by CVE-2006-2270. ...
CVE-2005-4738
IBM DB2 Universal Database (UDB) 8.1.0 prior to ESE AIX 5765F4100 is vulnerable to privilege escalation because it does not verify execute privileges for objects created from routines, allowing remote authenticated users to gain privileges. Affected product/version: IBM DB2 UDB 8.1.0 (ESE AIX 576...