Security Bulletin: IBM® Db2® could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows client. (CVE-2020-4739)

Summary IBM Db2 on Windows could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows client. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability ...

Security Bulletin: IBM® Db2® could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows client. (CVE-2020-4739)

Summary IBM DB2 on Windows could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows client. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability ...

Ubuntu 18.04 LTS / 20.04 LTS : WebKitGTK vulnerability (USN-4739-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4739-1 advisory. A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website...

Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM StoredIQ for Legal

Summary There are multiple vulnerabilities in IBM Db2 that affect IBM StoredIQ for Legal. These have been addressed in Fix Pack 2.0.3.13 of StoredIQ for Legal Vulnerability Details CVEID: CVE-2020-4701 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 10.5, 11.1, and 11...

Security Bulletin: Multiple IBM DB2 Server Vulnerabilities Affect IBM Emptoris Strategic Supply Management Platform

Summary Multiple IBM DB2 Server security vulnerabilities affect IBM Emptoris Strategic Supply Management Platform deployments. Vulnerability Details CVEID: CVE-2020-4701 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to a buffer...

IBM DB2 Connect 9.7 < FP11 40481 / 10.1 < FP6 40480 / 10.5 < FP11 40479 / 11.1 < FP5 40478 / 11.5 < 11.5.5000.1587 Command Injection

A command injection vulnerability exists in IBM DB2 Connect due to a DLL search order hijacking vulnerability in Microsoft Windows client. An unauthenticated, local attacker can exploit this, by placing a specially crafted file in a compromised folder, to execute arbitrary commands. Note that...

CVE-2020-4739

creationtimestamp| type| source ---|---|--- 2020-11-20 16:42:44+00:00| seen| https://t.me/cibsecurity/16657...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4739)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4739 advisory. - Input: gtco - bounds check collection indent level Grant Hernandez Orabug: 30074413 CVE-2019-13631 Tenable has extracted the preceding description block...

CVE-2017-4739

...

CVE-2017-4739

CVE-2017-4739 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-4739

CVE-2016-4739 – Apple mDNSResponder information disclosure : In OS X builds prior to 10.12, when VMnet.framework is used, mDNSResponder can cause a DNS proxy to listen on all interfaces, enabling remote attackers to extract sensitive information by sending a DNS query to an unintended interface. ...

CVE-2015-4739

Technical details about CVE-2015-4739 (affected product/component/version, root cause, impact, or fix) are not publicly provided in the connected documents. Monitor for updates.

UBUNTU-CVE-2013-4739

The MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to obtain sensitive information from kernel stack memory via 1 a crafted MSMMCRIOCTLEVTGET ioctl call, related to...

CVE-2013-4739

CVE-2013-4739 concerns the MSM camera driver for the Linux kernel 3.x (used in Qualcomm Innovation Center Android contributions for MSM devices). The description states that an attacker can obtain sensitive information from kernel stack memory via two crafted IOCTLs: MSM_MCR_IOCTL_EVT_GET (driver...

CVE-2012-4739

CVE-2012-4739 concerns multiple XSS vulnerabilities in Barracuda SSL VPN before version 2.2.2.203 (2012-07-05). The flaws allow remote attackers to inject arbitrary web script or HTML through parameters in showUserResourceCategories.do (policyLaunching, resourcePrefix, actionPath), fileSystem.do ...

CVE-2011-4739

The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in smb/my-profile a...

CVE-2011-4739

CVE-2011-4739 affects Parallels Plesk Panel Control Panel version 10.2.0 build 20110407.20. The underlying issue is that the password form field is generated without disabling autocomplete, which can allow remote attackers to bypass authentication by exploiting an unattended workstation. Demonstr...

CVE-2010-4739

Joomla! Maian Media Silver (com_maianmedia) component is reported to be prone to SQL injection via the category parameter (cat) in the music action of index.php. OpenVAS entries describe multiple SQL injection vulnerabilities in this component, indicating a remote attacker could manipulate SQL qu...

CVE-2009-4739

CVE-2009-4739 affects SkaDate Dating (PHP). The vulnerability is a PHP remote file inclusion in index.php, exploitable via the language_id parameter to execute arbitrary PHP code from an attacker-supplied URL. The issue can also be leveraged for arbitrary local file inclusion through directory tr...

CVE-2009-4739

PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP code via a URL in the languageid parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences...