72 matches found
Microsoft Windows Filename Parsing Remote Code Execution (MS12-081; CVE-2012-4774)
A remote code execution vulnerability has been reported in Microsoft Windows...
CVE-2010-4774
Summary (CVE-2010-4774): AuraCMS 1.62 contains an SQL injection in the pdf.php component, exploitable via the id parameter to allow remote execution of arbitrary SQL commands. This vulnerability is documented as a separate vector from CVE-2007-4804/2007-4171, and is supported by multiple connecte...
CVE-2009-4774
Summary: CVE-2009-4774 affects Sun Solaris 10 and OpenSolaris snv_49–snv_117 when running in 64-bit mode on x86 with a Linux (lx) branded zone, enabling local users to trigger a denial of service (panic) via unspecified vectors. The issue is related to a prior CVE-2007-6225 family and is document...
Solaris 10 (x86) : 141415-10
SunOS 5.10x86: kernel patch. Date this patch was last updated by Sun : Sep/01/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...
CVE-2008-4774
CVE-2008-4774 is a cross-site scripting (XSS) vulnerability in QuestCMS, exposed in main/main.php via the cx parameter. The issue allows remote attackers to inject arbitrary web script or HTML. NVD lists a MEDIUM severity (CVSS v2 base score 4.3) with network attack vector, no authentication, and...
CVE-2008-4774
creationtimestamp| type| source ---|---|--- 2008-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6853...
CVE-2006-4774
Cisco IOS VLAN Trunking Protocol (VTP) vulnerability CVE-2006-4774 affects devices that run VTP in server or client mode and process crafted VTP summary packets on a trunk-enabled port. An unauthenticated remote attacker on the local network can cause a denial-of-service, potentially forcing a sw...
CVE-2005-4774
The provided data identifies CVE-2005-4774 as a cross-site scripting (XSS) vulnerability in Xerver 4.17. The vulnerability allows remote attackers to inject arbitrary web script or HTML after a /%00/ sequence at the end of the URI, potentially affecting users who view the modified URL. The initia...
CVE-2018-4774
CVE-2018-4774 is rejected/not used and does not represent an active vulnerability entry.
MS:D6677D54-CE7A-4774-A696-84DE34EFF033
...