54 matches found
CVE-2014-4765
CVE-2014-4765 affects IBM Maximo Asset Management and related IBM products (e.g., SmartCloud Control Desk, Tivoli IT Asset Management for IT, and related Maximo variants) with an information-disclosure flaw that lets remote attackers read an error message to obtain sensitive directory information...
OTRS < 2.4.8 Race Condition Data Corruption Vulnerability
Open Ticket Request System OTRS is prone to a data corruption vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2011-4765
The CVE concerns Parallels Plesk Small Business Panel 10.2.0, where the Site Editor (SiteBuilder) feature fails to set the HTTPOnly flag on a Set-Cookie header. This omission allows scripts to access the cookie, potentially leaking sensitive information via cookies used by Wizard/Edit/Modules/Ima...
SuSE 11.1 Security Update : webkit (SAT Patch Number 4765)
Webkit version 1.2.7 fixes several security issues. CVE-2010-2441 / CVE-2010-2901 / CVE-2010-4042 / CVE-2010-4492 / CVE-2010-4493 / CVE-2010-4578 / CVE-2011-0482 / CVE-2011-0778 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
CVE-2010-4765
Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System OTRS before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets...
CVE-2010-4765
Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System OTRS before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets...
CVE-2010-4765
The CVE affects Open Ticket Request System (OTRS) prior to 2.4.8. A race condition in Kernel::System::Main::FileWrite can allow remote authenticated users to corrupt the TicketCounter.log during ticket creation. Impact is data integrity loss and potential data corruption; exploitation requires au...
CVE-2010-4765
Race condition in the Kernel::System::Main::FileWrite method in Open Ticket Request System OTRS before 2.4.8 allows remote authenticated users to corrupt the TicketCounter.log data in opportunistic circumstances by creating tickets...
CVE-2009-4765
CVE-2009-4765 affects CNR Hikaye Portal 2.0. The issue is insufficient access control allowing remote attackers to download the database by requesting db/hikaye.mdb from the web root. Connected documents corroborate the same description across Red Hat and NVD sources. No explicit exploit details,...
CVE-2008-4765
CVE-2008-4765 describes a SQL injection vulnerability in the osCommerce Poll Booth Add-On 2.0, specifically in pollBooth.php. The issue allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results operation. The vulnerability stemS from unsafely handling the pol...
CVE-2006-4765
Affected product: NETGEAR DG834GT Wireless ADSL router. Vulnerability details: An input length issue in the username field of the login window can cause a denial of service (device hang) on firmware 1.01.28. The available sources consistently describe the issue as a denial of service triggered by...
CVE-2005-4765
BEA WebLogic Server/Express 8.1 SP4 and earlier and 7.0 SP6 and earlier are affected. When using weblogic.Deployer with the t3 protocol, it does not automatically fall back to the secure t3s protocol even if an Administration port is enabled on the Admin server, which may allow remote attackers t...
