76 matches found
Security Bulletin: CSV Injection Security vulnerability in ACCE in FileNet Content Manager
Summary Administration Console for Content Platform Engine ACCE CSV Injection Security vulnerability exists in FileNet Content Manager Vulnerability Details CVEID: CVE-2020-4759 DESCRIPTION: IBM FileNet Content Manager is potentially vulnerable to CVS Injection. A remote attacker could execute...
Debian DSA-4759-1 : ark - security update
Fabian Vogt reported that the Ark archive manager did not sanitise extraction paths, which could result in maliciously crafted archives with symlinks writing outside the extraction directory. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...
Security Bulletin: Information disclosure in IBM Business Process Manager (BPM) V8.5 document attachments search (CVE-2014-4759)
Summary IBM BPM document attachment queries can return document properties that contain sensitive information. Vulnerability Details CVE ID: CVE-2014-4759 DESCRIPTION: An Ajax service that is shipped with the Content Management toolkit allows users to search for IBM BPM document attachments from...
CVE-2017-4759
CVE-2017-4759 is rejected/not used per the Initial Description.
nationalrail.co.uk IFRAME Injection vulnerability
Vulnerable URL: http://www.nationalrail.co.uk/servicedisruptions/currentAndFuture.aspx?TravelDate=" xany Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.08.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 4759 VIP websit...
Apple iTunes < 12.5.1 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.5.1. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper handling of error prototypes. An unauthenticated, remote attacker can exploit this, by...
Apple iTunes Multiple Vulnerabilities (Sep 2016) - Windows
Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...
Memory corruption
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4766,...
CVE-2016-4759
CVE-2016-4759 affects WebKit in Apple iOS prior to 10, tvOS prior to 10, iTunes prior to 12.5.1 on Windows, and Safari prior to 10. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) through a crafted web site. It is described as a...
Oracle Data Quality Trillium Based SetBasicPreviewData Type Confusion (CVE-2015-4759)
A remote code execution vulnerability exists in Oracle Data Quality TSS12.LoaderWizard.lwctrl ActiveX control. The vulnerability is due to a type confusion when handling data passed to SetBasicPreviewData. A remote attacker can exploit this vulnerability by enticing a user to access a maliciously...
CVE-2015-4759
Technical details about CVE-2015-4759 are not publicly provided in the supplied documents. The connected records describe related issues and malware references but do not disclose affected products, root cause, or fixes. Monitor for updates.
CVE-2014-4759
IBM BPM 8.5.x through 8.5.5 is affected by CVE-2014-4759 due to an Ajax service in the Content Management toolkit that allows authenticated users to perform a document-attachment search and read document properties, potentially exposing sensitive information. The vulnerability arises because quer...
CVE-2013-4759
The CVE-2013-4759 entry describes Cross-Site Scripting (XSS) in Magnolia CMS, specifically in the Magnolia Form module. Affected are Magnolia Form module versions 1.x before 1.4.7 and 2.x before 2.0.2, where insufficient sanitisation of user-supplied data in the username, fullname, and email para...
Cross-Site Scripting (XSS) in Magnolia CMS
Advisory ID: HTB23163 Product: Magnolia CMS Vendor: Magnolia International Ltd Vulnerable Versions: 4.5.7, 4.5.8, 4.5.9, 5.0 and 5.0.1 Community Edition Tested Version: 5.0 Community Edition Vendor Notification: July 3, 2013 Vendor Patch: July 18, 2013 Public Disclosure: July 24, 2013 Vulnerabili...
Xymon Systems and Network Monitor - remote file deletion vulnerability
Advisory ID: HTB23163 Product: Magnolia CMS Vendor: Magnolia International Ltd Vulnerable Versions: 4.5.7, 4.5.8, 4.5.9, 5.0 and 5.0.1 Community Edition Tested Version: 5.0 Community Edition Vendor Notification: July 3, 2013 Vendor Patch: July 18, 2013 Public Disclosure: July 24, 2013 Vulnerabili...
Magnolia CMS 5.0.1 Community Edition Cross Site Scripting
Magnolia CMS versions 5.0.1, 5.0, 4.5.9, 4.5.8, and 4.5.7 suffer from a cross site scripting vulnerability. Vendor: Magnolia International Ltd Vulnerable Versions: 4.5.7, 4.5.8, 4.5.9, 5.0 and 5.0.1 Community Edition Tested Version: 5.0 Community Edition Vendor Notification: July 3, 2013 Vendor...
Magnolia CMS 5.0.1 Community Edition Cross Site Scripting
Advisory ID: HTB23163 Product: Magnolia CMS Vendor: Magnolia International Ltd Vulnerable Versions: 4.5.7, 4.5.8, 4.5.9, 5.0 and 5.0.1 Community Edition Tested Version: 5.0 Community Edition Vendor Notification: July 3, 2013 Vendor Patch: July 18, 2013 Public Disclosure: July 24, 2013 Vulnerabili...
CVE-2013-4759
creationtimestamp| type| source ---|---|--- 2013-07-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38675...
CVE-2012-4759
CVE-2012-4759 describes an untrusted search path vulnerability in Foxit Reader’s Facebook plug-in (facebook_plugin.fpi). A local attacker could gain privileges by placing a Trojan horse dwmapi.dll in the current working directory while Foxit Reader 5.3.1.0606 is running, as demonstrated by a dire...
CVE-2011-4759
Parallels Plesk Small Business Panel 10.2.0 is affected by a cross-domain Referer leakage issue. When handling GET requests with specific query strings (e.g., client@1/domain@1/hosting/file-manager/ and related paths), the application generates web pages containing external links, which can allow...