61 matches found
About the security content of macOS Server 5.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
CVE-2016-4754
ServerDocs Server in Apple OS X Server before 5.2 supports the RC4 cipher, which might allow remote attackers to defeat cryptographic protection mechanisms via unspecified vectors...
CVE-2016-4754
CVE-2016-4754 affects ServerDocs Server in Apple OS X Server before 5.2. The issue is weaknesses in the RC4 cryptographic algorithm that allow an unauthenticated, remote attacker to defeat cryptographic protection. Appleās macOS Server 5.2 mitigation removes RC4 support for ServerDocs Server, add...
About the security content of macOS Server 5.2
About the security content of macOS Server 5.2 This document describes the security content of macOS Server 5.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
Design/Logic Flaw
Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624,...
CVE-2015-4754
Technical details about CVE-2015-4754 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2013-4754
Multiple cross-site scripting XSS vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field to browse.php or 2 the Title field to prefs.php...
CVE-2012-4754
CVE-2012-4754 affects MindManager 2012 (version 10.0.493). The issue is an untrusted search path vulnerability where local users can gain privileges via a Trojan horse placed in the current working directory (notably using either ssgp.dll or dwmapi.dll), demonstrated by a directory containing a ....
CVE-2011-4754
CVE-2011-4754 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Parallels Plesk Small Business Panel 10.2.0. The issue allows remote attackers to inject arbitrary web script or HTML through crafted input to a PHP script, with examples including smb/app/available/id/apscatalog/...
CVE-2010-4754
The CVE-2010-4754 entry covers a DoS in the glob() implementation of libc (and related glob in libsystem on macOS) caused by crafted glob expressions that do not match any pathnames. The message notes remote authenticated users can trigger CPU/memory consumption via such expressions, demonstrated...
CVE-2009-4754
CVE-2009-4754 describes a stack-based buffer overflow in Mercury Audio Player 1.21 triggered by a long string inside a malformed .m3u playlist, enabling remote execution of arbitrary code. The affected component is Mercury Audio Player 1.21; the root cause is overflow during playlist parsing. The...
CVE-2009-4754
creationtimestamp| type| source ---|---|--- 2009-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8578 2009-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8583...
CVE-2008-4754
SQL injection vulnerability in forum.php in Scripts for Sites SFS Ez Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter...
CVE-2008-4754
The CVE-2008-4754 issue affects Scripts for Sites (SFS) Ez Forum, where the SQL injection flaw is in forum.php via the forum parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, leading to potential data exposure or modification. The NVD entry lists a CVSS v2 ba...
CVE-2008-4754
creationtimestamp| type| source ---|---|--- 2008-10-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6843...
CVE-2007-4754
Format string vulnerability in the safebprintf function in acesrc/acebotcmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service daemon crash via format string specifiers in a nickname...
CVE-2007-4754
Alien Arena 2007 (v6.10 and earlier) is affected by a format-string vulnerability in the safe_bprintf function (acesrc/acebot_cmds.c) that allows remote attackers to trigger a denial of service (daemon crash) via format specifiers in a nickname. This CVE (CVE-2007-4754) is detailed across multipl...
CVE-2007-4754
Format string vulnerability in the safebprintf function in acesrc/acebotcmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service daemon crash via format string specifiers in a nickname...
CVE-2006-4754
PHProg before 1.1 has a Cross-site Scripting (XSS) flaw in index.php, exploitable via the album parameter used in an opendir call. The same issue can enable full path disclosure with an invalid album value that reveals the installation path in error messages. Affected software: PHProg versions pr...
CVE-2005-4754
CVE-2005-4754 affects BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier. The issue allows remote attackers to obtain sensitive information (intranet IP addresses) through unspecified attack vectors related to network address translation. The connected sources confirm the affected produ...