CVE-2017-4742

CVE-2017-4742 entry is rejected and not used, per the Initial Description.

CVE-2016-4742

NSSecureTextField in Apple OS X before 10.12 does not enable Secure Input, which allows attackers to discover credentials via a crafted app...

CVE-2016-4742

CVE-2016-4742 describes a vulnerability in NSSecureTextField on Apple OS X prior to 10.12: Secure Input was not enabled due to a state management issue, potentially allowing a crafted application to reveal credentials. The issue is listed in the macOS Sierra 10.12 security content, with fixes des...

CVE-2015-4742

CVE-2015-4742 describes an unspecified vulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware, affecting versions 11.1.1.7.0, 11.1.2.4.0, 12.1.2.0.0, and 12.1.3.0.0. It allows remote attackers to impact availability via vectors related to ADF Faces. The connected sources cor...

CVE-2014-4742

Cross-site scripting XSS vulnerability in system/classlink.php in the System module modulesystem in Kajona before 4.5 allows remote attackers to inject arbitrary web script or HTML via the systemid parameter in a mediaFolder action to index.php...

CVE-2014-4742

Kajona CMS (System module) is affected by CVE-2014-4742: an XSS in system/class_link.php via the systemid parameter in a mediaFolder action to index.php, affecting Kajona before version 4.5. The vulnerability allows remote attackers to inject arbitrary web script/HTML. Several entries (NVD, Red H...

CVE-2014-4742

Cross-site scripting XSS vulnerability in system/classlink.php in the System module modulesystem in Kajona before 4.5 allows remote attackers to inject arbitrary web script or HTML via the systemid parameter in a mediaFolder action to index.php...

CVE-2013-4742

CVE-2013-4742 describes a buffer overflow in SurgeFTP Server (NetWin SurgeFTP) prior to version 23d2 triggered during authentication by a long string in the request. The effect is a denial of service (crash) and potentially arbitrary code execution via memory corruption on heap/stack. Root cause:...

SurgeFtp Server BufferOverflow Vulnerability

------------------------------------------------------------------------------- | SurgeFtp Server BufferOverflow Vulnerability| -------------------------------------------------------------------------------- Summary ================ SurgeFTP Server has a buffer overflow vulnerability which effec...

CVE-2012-4742

CVE-2012-4742 affects PacketFence, specifically the web_node_register function in web.pm prior to version 3.0.2. The collection of connected documents confirms a remote code execution possibility via unspecified vectors. The Red Hat advisory and NVD entry corroborate the vulnerability description...

CVE-2011-4742

The CVE-2011-4742 entry affects Parallels Plesk Panel 10.2.0 build 20110407.20: the Control Panel exposes web pages containing e-mail addresses not intended for that deployment, enabling remote attackers to obtain potentially sensitive information by reading pages such as smb/user/list. Documents...

CVE-2011-4742

The Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a page, as demonstrat...

CVE-2010-4742

CVE-2010-4742 describes a stack-based buffer overflow in the MOXA ActiveX SDK’s MediaDBPlayback.DLL (version 2.2.0.5) ActiveX control. The flaw allows remote attackers to execute arbitrary code by sending an overly long PlayFileName property value. Multiple connected sources (Red Hat advisory, CV...

MOXA MediaDBPlayback - ActiveX Control Buffer Overflow (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'MOXA MediaDBPlayback ActiveX Control Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in...

Network Associates PGP KeyServer 7 LDAP Buffer Overflow

This module exploits a stack buffer overflow in the LDAP service that is part of the NAI PGP Enterprise product suite. This module was tested against PGP KeyServer v7.0. Due to space restrictions, egghunter is used to find our payload - therefore you may wish to adjust WfsDelay. This module...

MOXA MediaDBPlayback ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in MOXAActiveXSDK. When sending an overly long string to the PlayFileName of MediaDBPlayback.DLL 2.2.0.5 an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/fileformat/moxa/mediadbplayback msf...

CVE-2009-4742

creationtimestamp| type| source ---|---|--- 2009-10-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10003...

CVE-2008-4742

CVE-2008-4742 describes multiple cross-site scripting (XSS) vulnerabilities in TimeTrex 2.2.11, specifically in interface/Login.php. The flaws allow remote attackers to inject arbitrary web script or HTML by manipulating the (1) password or (2) user_name parameters. The public records do not prov...

CVE-2008-4742

creationtimestamp| type| source ---|---|--- 2008-08-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32288...

CVE-2007-4742

CVE-2007-4742 affects Claroline prior to 1.8.6. Affected component: admin/adminusers.php sort parameter. Root cause: invalid value in sort leads to error message that may leak the file path, demonstrated by input containing an XSS sequence; authenticated remote admins can obtain sensitive informa...