CVE-2013-4758

Double free vulnerability in the writeDataError function in the ElasticSearch plugin omelasticsearch in rsyslog before 7.4.2 and before 7.5.2 devel, when errorfile is set to local logging, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted...

OTRS < 3.0.3 Password Disclosure Vulnerability

Open Ticket Request System OTRS is prone to a password disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LSE Leading Security Experts GmbH - LSE-2013-07-03 - rsyslog ElasticSearch Plugin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 === LSE Leading Security Experts GmbH - Security Advisory 2013-07-03 === rsyslog ElasticSearch Plugin - Double Free Memory Corruption - ------------------------------------------------------------ Affected Version ================ rsyslog 7.4.0 stable...

CVE-2012-4758

CVE-2012-4758 concerns CyberLink PowerProducer 5.5.3.2325, where multiple untrusted search path vulnerabilities allow local users to elevate privileges via Trojan horse files (mfc71loc.dll or mfc71enu.dll) placed in the current working directory, demonstrated by a directory containing a .ppp or ....

CVE-2011-4758

Parallels Plesk Small Business Panel 10.2.0 is affected by an issue where cleartext password input over HTTP can allow remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in smb/auth and related files. This CVE (CVE-2011-4758) is documented across mu...

CVE-2010-4758

installer.pl in Open Ticket Request System OTRS before 3.0.3 has an Inbound Mail Password field that uses the text type, instead of the password type, for its INPUT element, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2010-4758

installer.pl in Open Ticket Request System OTRS before 3.0.3 has an Inbound Mail Password field that uses the text type, instead of the password type, for its INPUT element, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2010-4758

Open Ticket Request System (OTRS) is affected (OTRS before 3.0.3). The Inbound Mail Password field uses an INPUT of type text instead of password, enabling a physically proximate attacker to read the password on screen. Root cause: password field not masked in the UI. Impact: potential password d...

CVE-2010-4758

installer.pl in Open Ticket Request System OTRS before 3.0.3 has an Inbound Mail Password field that uses the text type, instead of the password type, for its INPUT element, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2009-4758

Stack-based buffer overflow in dicas Mpegable Player 2.12 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long string in a .YUV file...

CVE-2009-4758

CVE-2009-4758 describes a stack‑based buffer overflow in dicas Mpegable Player 2.12 that can be triggered by processing a long string in a .YUV file , enabling a remote attacker to cause a crash or potentially execute arbitrary code. The connected documents (NVD/NVD variant entries) consistently ...

CVE-2009-4758

creationtimestamp| type| source ---|---|--- 2009-04-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8568...

CVE-2008-4758

Directory traversal vulnerability in downloadfile.php in PHP-Daily allows remote attackers to read arbitrary local files via a .. dot dot in the fichier parameter...

CVE-2008-4758

Technical details of CVE-2008-4758 are not publicly provided in the connected documents. No explicit affected product/version, root cause, or remediation is available here; monitor for updates.

CVE-2008-4758

Directory traversal vulnerability in downloadfile.php in PHP-Daily allows remote attackers to read arbitrary local files via a .. dot dot in the fichier parameter...

CVE-2008-4758

creationtimestamp| type| source ---|---|--- 2008-10-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6833...

Debian DSA-1488-1 : phpbb2 - several vulnerabilities

Several remote vulnerabilities have been discovered in phpBB, a web-based bulletin board. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0471 Private messaging allowed cross site request forgery, making it possible to delete all private messages of...

CVE-2007-4758

The CVE-2007-4758 entry affects the Cosminexus Developer’s Kit for Java (Cosminexus 4–7). The vulnerability is a buffer overflow in the image-processing APIs, with the root cause described as multiple buffer overflows. Consequences stated include denial of service or execution of arbitrary code v...

CVE-2007-4758

Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...

CVE-2006-4758

CVE-2006-4758 affects phpBB 2.0.21 where an authenticated forum administrator can upload files by crafting the avatar_path parameter ending with .php%00. The vulnerability arises in the handling of pathnames ending in %00, enabling arbitrary file uploads. Public references in Debian OpenVAS entri...