80 matches found
CVE-2017-4766
CVE-2017-4766 entry is rejected/not used and does not represent an active vulnerability.
Apple iTunes < 12.5.1 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.5.1. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper handling of error prototypes. An unauthenticated, remote attacker can exploit this, by...
Memory corruption
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4766,...
CVE-2016-4766
WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4759, CVE-2016-4765, CVE-2016-4767,...
CVE-2016-4766
CVE-2016-4766 affects WebKit-based components in Apple iOS (before 10), tvOS (before 10), iTunes (before 12.5.1 on Windows), and Safari (before 10). The issue allows an attacker to trigger remote code execution or a memory corruption-based denial of service via a crafted web site. The vulnerabili...
Fedora Update for community-mysql FEDORA-2016-65
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 22 : community-mysql-5.6.29-1.fc22 (2016-5cb344dd7e)
This is an update to 5.6.29 that delivers also all fixes for CVE-2015-4766, CVE-2015-4791, CVE-2015-4792, CVE-2015-4800, CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4862,...
openSUSE Security Update : mysql (openSUSE-2015-889) (BACKRONYM)
MySQL was updated to 5.6.27 to fix security issues and bugs. The following vulnerabilities were fixed as part of the upstream release boo951391: CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789, CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800, CVE-2015-4802, CVE-2015-4815,...
SOL86326526 - MySQL vulnerabilities CVE-2015-4766, CVE-2015-4904, CVE-2015-4791, and CVE-2015-4807
Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...
CVE-2015-4766
CVE-2015-4766 is an unspecified local DoS vulnerability in Oracle MySQL Server 5.6.25 and earlier, exploitable by local users via unknown vectors related to Server: Security: Firewall. The vulnerability is described as allowing access/service disruption (availability impact) with a low CVSS base ...
CVE-2014-4766
CVE-2014-4766 affects IBM Sametime Classic Meeting Server 8.0.x and 8.5.x. A remote attacker can read an exported Record and Playback (RAP) file to obtain sensitive information. The CVSSv2 base score is 5.0 (Medium) with network access and low attack complexity; no authentication required and no ...
CVE-2013-4766
The CVE-2013-4766 issue affects Eucalyptus, where the gather log service (in CC/NC components) before version 3.3.1 permits remote attackers to read log files via an unspecified request to the Cluster Controller or Node Controller. The root cause is a insecure access path exposing log data, leadi...
CVE-2011-4766
The CVE-2011-4766 entry concerns Parallels Plesk Small Business Panel 10.2.0, specifically the Site Editor/SiteBuilder and the file wysiwyg/fckconfig.js. The claim is that remote attackers could obtain ASP source code via direct access to that file; however, multiple sources note this is disputed...
CVE-2010-4766
The AgentTicketForward feature in Open Ticket Request System OTRS before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows remote attackers to obtain potentially sensitive image information in opportunistic circumstances by reading a forwarded message in a...
CVE-2010-4766
The AgentTicketForward feature in Open Ticket Request System OTRS before 2.4.7 does not properly remove inline images from HTML e-mail messages, which allows remote attackers to obtain potentially sensitive image information in opportunistic circumstances by reading a forwarded message in a...
CVE-2010-4766
CVE-2010-4766 affects Open Ticket Request System (OTRS) prior to version 2.4.7. The AgentTicketForward feature does not properly remove inline images from HTML email messages, enabling potential information disclosure where an attacker could read a forwarded message in a standard email client and...
Mac OS X Security Update 2007-009
The remote host is missing Security Update 2007-009. One or more of the following components are affected: Address Book CFNetwork ColorSync Core Foundation CUPS Desktop Services Flash Player Plug-in GNU Tar iChat IO Storage Family Launch Services Mail perl python Quick Look ruby Safari Safari RSS...
CVE-2009-4766
The CVE-2009-4766 entry concerns YP Portal MS-Pro Surumu (MS-Pro Portal Scripti) versions 1.0 and 1.2. The issue is improper access control that stores sensitive data under the web root, enabling remote attackers to retrieve the database file galeri/database/db.mdb via a direct request. Connected...
CVE-2009-4766
YP Portal MS-Pro Surumu aka MS-Pro Portal Scripti 1.0 and 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for galeri/database/db.mdb...