67 matches found
CVE-2016-4757
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
RHEL 7 : mariadb (RHSA-2015:1665) (BACKRONYM)
Updated mariadb packages that fix several security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...
Oracle Linux 7 : mariadb (ELSA-2015-1665)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1665 advisory. 1:5.5.44-1 - Rebase to 5.5.44 Resolves: 1247021 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
Moderate: Red Hat Security Advisory: mariadb55-mariadb security update
Updated mariadb55-mariadb packages that fix several security issues are now available for Red Hat Software Collections 2. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...
Important: Red Hat Security Advisory: rh-mariadb100-mariadb security update
Updated rh-mariadb100-mariadb packages that fix several security issues are now available for Red Hat Software Collections 2. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
RHEL 5 : mysql55-mysql (RHSA-2015:1628)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1628 advisory. - mysql: unspecified vulnerability related to Server:InnoDB:DML CPU Jan 2015 CVE-2014-6568 - mysql: unspecified vulnerability related to...
Oracle MySQL 5.5.x < 5.5.43 Optimizer DoS (July 2015 CPU)
The version of Oracle MySQL installed on the remote host is 5.5.x prior to 5.5.43. It is, therefore, affected by an unspecified flaw in the Optimizer subcomponent. An authenticated, remote attacker can exploit this to cause a denial of service condition. C Tenable Network Security, Inc...
KLA10638 Multiple vulnerabilities in Oracle MySQL
Unspecified vulnerabilities were found in MySQL Server. Malicious users can exploit these vulnerabilities to affect confidentiality,integrity and availability via unknown vectors related to Partition, DML, GIS and RBR. Original advisories Oracle Critical Patch Update Advisory Related products MyS...
CVE-2015-4757
The connected Nessus entry MiracleLinux AXSA:2015-464:01 references CVE-2015-4757 as one of multiple vulnerabilities fixed in MiracleLinux 4 mysql55-mysql-5.5.45-1.0.1.AXS4. The description indicates an unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier tha...
CVE-2014-4757
CVE-2014-4757 affects the Outlook Extension in IBM Content Collector (version 4.0.0.x) prior to 4.0.0.0-ICC-OE-IF004. The issue lets local users bypass the Reviewer privilege and read e-mail messages from an arbitrary mailbox by invoking the Search function. The NVD entry lists a low severity (CV...
CVE-2012-4757
Multiple untrusted search path vulnerabilities in CyberLink StreamAuthor 4.0 build 3308 allow local users to gain privileges via a Trojan horse 1 mfc71loc.dll or 2 mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .sta or .stp file. NOTE: the...
CVE-2012-4757
CVE-2012-4757 describes multiple untrusted search path vulnerabilities in CyberLink StreamAuthor 4.0 build 3308 that allow local users to gain privileges by placing (1) mfc71loc.dll or (2) mfc71enu.dll in the current working directory, demonstrated via a directory containing a .sta or .stp file. ...
CVE-2011-4757
Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in smb/auth and certain other files...
CVE-2011-4757
Parallels Plesk Small Business Panel 10.2.0 is affected: a password form field is generated without disabling autocomplete, enabling possible authentication bypass on unattended workstations through forms such as smb/auth. Root cause is autocomplete not being disabled on the password field. The c...
CVE-2010-4757
Cross-site scripting XSS vulnerability in submitnews.php in e107 before 0.7.23 allows remote attackers to inject arbitrary web script or HTML via the submitnewstitle parameter, a different vector than CVE-2008-6208. NOTE: some of these details are obtained from third party information. NOTE: this...
CVE-2010-4757
Cross-site scripting XSS vulnerability in submitnews.php in e107 before 0.7.23 allows remote attackers to inject arbitrary web script or HTML via the submitnewstitle parameter, a different vector than CVE-2008-6208. NOTE: some of these details are obtained from third party information. NOTE: this...
CVE-2010-4757
The CVE-2010-4757 entry describes a cross-site scripting (XSS) vulnerability in e107’s submitnews.php, exploitable via the submitnews_title parameter in versions before 0.7.23. This is a client-side script injection risk affecting e107, with impact limited to arbitrary script execution in the use...
CVE-2009-4757
Stack-based buffer overflow in BrotherSoft EW-MusicPlayer 0.8 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long string in a malformed playlist .m3u file. NOTE: some of these details are obtained from third party information...
CVE-2009-4757
CVE-2009-4757 affects BrotherSoft EW-MusicPlayer 0.8. It describes a stack-based buffer overflow triggered by a long string in a malformed playlist (.m3u), allowing remote attackers to cause a denial of service or possibly execute arbitrary code. The description notes that some details come from ...
