140 matches found
CVE-2016-4768
CVE-2016-4768 affects WebKit components across Apple platforms: iOS prior to 10, tvOS prior to 10, Safari prior to 10, and iTunes on Windows prior to 12.5.1. The vulnerability is triggered by a crafted web site and results in remote code execution or memory corruption, with impact on confidential...
CVE-2015-4768
CVE-2015-4768 describes an unspecified vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (versions 6.1, 6.2, 6.3.0–6.3.7) that allows remote authenticated users to affect confidentiality via unknown vectors related to Diagnostics. The NVD entry ...
CVE-2015-4768
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, and 6.3.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Diagnostics...
CVE-2014-4768
The CVE-2014-4768 issue affects IBM UEFI on Flex System x880 X6 and System x3850/x3950 X6, enabling a privileged user to configure legacy boot mode that causes a temporary denial of service. Affected firmware levels and MTMs are listed in IBM’s Security Bulletin: for x880 X6 MTM 4259/7903, ibm_fw...
CVE-2012-4768
CVE-2012-4768 is a Cross-Site Scripting vulnerability in the WordPress plugin Download Monitor prior to 3.3.5.9. The dlsearch parameter written to download pages can inject arbitrary JavaScript, potentially leading to session cookie theft, redirects, or malware delivery. Exploitation affects Word...
Eucalyptus Web Services拒绝服务漏洞
CVE ID:CVE-2013-4768 Eucalyptus是一款开源的软件基础结构，用来通过计算集群或工作站群实现弹性的、实用的云计算。 Eucalyptus web services网络清理代码存在错误，允许攻击者利用漏洞提交特殊的请求进行拒绝服务攻击。 0 Eucalyptus 3.x Eucalyptus 3.4.2版本已修复该漏洞，建议用户下载使用： https://www.eucalyptus.com...
CVE-2013-4768
CVE-2013-4768 affects Eucalyptus web services APIs (versions 2.0–3.4.1) and allows remote DoS via the network-connection clean-up code in core services: Cloud Controller, Walrus, Storage Controller, and VMware Broker. The issue is triggered by malformed requests, leading to partial availability i...
OTRS < 2.3.5 Queue Access Restriction Bypass Vulnerability
Open Ticket Request System OTRS is prone to a restriction bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Wordpress Download Monitor - Download Page Cross-Site Scripting
/----------------------------------------------------------------- | Wordpress Download Monitor - Download Page Cross-Site Scripting | -----------------------------------------------------------------/ Summary ======= Wordpress Download Monitor 3.3.5.7 is subject to a cross-site scripting...
Wordpress Download Monitor 3.3.5.7 Cross Site Scripting
/-----------------------------------------------------------------\ | Wordpress Download Monitor - Download Page Cross-Site Scripting | -----------------------------------------------------------------/ Summary ======= Wordpress Download Monitor 3.3.5.7 is subject to a cross-site scripting...
CVE-2011-4768
Parallels Plesk Small Business Panel 10.2.0 Site Editor (SiteBuilder) omits the Content-Type header charset parameter for certain resources, which might allow remote attackers to cause an unspecified impact via a interpretation conflict involving Wizard/Edit/Modules/Image and related files. The a...
CVE-2010-4768
Open Ticket Request System OTRS before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remov...
CVE-2010-4768
Open Ticket Request System OTRS before 2.3.5 does not properly disable hidden permissions, which allows remote authenticated users to bypass intended queue access restrictions in opportunistic circumstances by visiting a ticket, related to a certain ordering of permission-set and permission-remov...
CVE-2010-4768
OTRS
Mac OS X Security Update 2007-009
The remote host is missing Security Update 2007-009. One or more of the following components are affected: Address Book CFNetwork ColorSync Core Foundation CUPS Desktop Services Flash Player Plug-in GNU Tar iChat IO Storage Family Launch Services Mail perl python Quick Look ruby Safari Safari RSS...
CVE-2009-4768
CVE-2009-4768 affects Blizzard Warcraft III: The Frozen Throne (versions 1.24b and earlier). The vulnerability resides in the JASS script interpreter, enabling a crafted custom map to trigger arbitrary code execution by user-assisted remote attackers. This is described as an unspecified vulnerabi...
KLA10389 ACE vulnerability in Warcraft III
An unspecified vulnerability was found in Warcraft III. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed map. Original advisories - Related products Warcraft-III:-The-Frozen-Throne CVE list...
CVE-2008-4768
CVE-2008-4768 describes an SQL injection in TLM CMS 3.1 that allows remote attackers to run arbitrary SQL via the nom parameter to a-b-membres.php. The entry notes that the goodies.php vector is covered by CVE-2007-4808, and provenance is stated as unknown (third-party sources). The connected doc...
Gentoo Security Advisory GLSA 200801-19 (goffice)
The remote host is missing updates announced in advisory GLSA 200801-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200805-11 (chicken)
The remote host is missing updates announced in advisory GLSA 200805-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...