37 matches found
CVE-2016-4740
CVE-2016-4740 affects Apple iOS prior to 10 where Handoff for Messages may display messages without confirming a Messages signin, allowing potential exposure of sensitive information. The issue is tied to Messages state management and could let a device show messages before authentication. Apple’...
CVE-2015-4740
CVE-2015-4740 is an Oracle Database Server vulnerability in the RDBMS Partitioning component affecting versions 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2. The issue allows remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors. Connected s...
CVE-2013-4740
goodixtool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, relies on user-space length values for kernel-memory copies of procfs file content, which allows attackers to gain...
CVE-2013-4740
The CVE-2013-4740 entry concerns goodix_tool.c in the Goodix GT915 touchscreen driver for Linux kernel 3.x (used in Qualcomm Innovation Center Android MSM contributions). The root cause is reliance on user-space length values for kernel-memory copies of procfs content, enabling a local attacker t...
CVE-2012-4740
CVE-2012-4740 describes a cross-site scripting (XSS) vulnerability in the PacketFence captive portal, affecting versions before 3.3.0. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available documents do not provide exploit details, ...
CVE-2011-4740
The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 generates web pages containing external links in response to GET requests with query strings for smb/app/search-data/catalogId/marketplace and certain other files, which makes it easier for remote attackers to obtain sensitive...
CVE-2011-4740
The CVE-2011-4740 entry affects Parallels Plesk Panel 10.2.0 build 20110407.20. The issue is described as a cross-domain Referer leakage: the Control Panel generates web pages containing external links in response to GET requests with specific query strings (e.g., smb/app/search-data/catalogId/ma...
CVE-2010-4740
CVE-2010-4740 describes a stack-based buffer overflow in WTclient.dll of SCADA Engine’s BACnet OPC Client prior to 1.0.25, enabling a user‑assisted remote attacker to execute arbitrary code by processing a specially crafted .csv file. Public references confirm the vulnerability affects SCADA Engi...
CVE-2010-4740
creationtimestamp| type| source ---|---|--- 2010-09-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15026 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/bacnetcsv.rb 2025-02-06 03:13:40+00:00| seen|...
CVE-2009-4740
Summary: CVE-2009-4740 describes a directory traversal vulnerability in the Webesse E-Card (ws_ecard) extension for TYPO3, affecting version 1.0.2 and earlier. Affected software: TYPO3 environment with ws_ecard extension (version ≤ 1.0.2). Vulnerability details: Directory traversal via the ws_eca...
CVE-2008-4740
Directory traversal vulnerability in templater.php in the ZZTemplater module in TinyCMS 1.1.2, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the configtemplate parameter...
CVE-2008-4740
CVE-2008-4740 affects TinyCMS 1.1.2 with the ZZ_Templater module, specifically templater.php. The vulnerability is a directory traversal that, when register_globals is enabled and magic_quotes_gpc is disabled, allows a remote attacker to include and execute arbitrary local files by manipulating c...
CVE-2008-4740
creationtimestamp| type| source ---|---|--- 2008-08-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6287...
CVE-2006-4740
CVE-2006-4740 affects Jetbox CMS. The vulnerability allows remote attackers to obtain sensitive information by directly requesting certain files, exposing the server file path in error messages. Public references (NVD) indicate a partial confidentiality impact with network access and low attack c...