53 matches found
CVE-2020-4787
IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other...
Debian DSA-4787-1 : moin - security update
Two vulnerabilities were discovered in moin, a Python clone of WikiWiki. - CVE-2020-15275 Catarina Leite discovered that moin is prone to a stored XSS vulnerability via SVG attachments. - CVE-2020-25074 Michael Chapman discovered that moin is prone to a remote code execution vulnerability via the...
CVE-2019-4787
CVE-2019-4787 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2017-4787
CVE-2017-4787 is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-4787
Pulse Connect Secure (PCS) is affected by a read-access information disclosure in multiple versions: 7.4 up to 7.4r13.4, 8.0 up to 8.0r10, 8.1 up to 8.1r2, and 8.2 up to 8.2r0, where remote attackers could read sensitive system authentication files from an unspecified directory via unknown vector...
CVE-2016-4787
Pulse Connect Secure PCS 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors...
Design/Logic Flaw
Unspecified vulnerability in the Data Store component in Oracle Berkeley DB 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, and 12.1.6.0.35 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-2583, CVE-2015-2624,...
CVE-2015-4787
Technical details about CVE-2015-4787 are not provided in the supplied documents. Monitor for updates from Oracle/MITRE; no product/version/impact information is available here.
CVE-2014-4787
IBM Initiate Master Data Service web UI components are affected by CVE-2014-4787. The issue arises from improper validation of user-supplied input, allowing remote authenticated users to trigger cross-site scripting. Affected versions are 9.5 before 9.5.093013, 9.7 before 9.7.093013, 10.0 before ...
Microsoft Internet Explorer HTML Style Property Reference Counting Use After Free - Ver2 (CVE-2012-4787)
A use-after-free vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker could exploit this vulnerability by enticing a targe...
CVE-2013-4787
creationtimestamp| type| source ---|---|--- 2013-07-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38627 2025-08-31 03:01:11+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:12:49+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...
Microsoft Internet Explorer Ref Counting释放后重用远程代码执行漏洞(MS12-077)
BUGTRAQ ID: 56830 CVECAN ID: CVE-2012-4787 Microsoft Internet Explorer是微软公司推出的一款网页浏览器,使用相当广泛。 Microsoft Internet Explorer 6、7、8、9、10在处理恶意HTML内容时,Ref Counting存在错误的内存操作,通过引诱用户浏览恶意网站,未经身份验证的远程攻击者可利用此漏洞以当前用户权限执行任意代码。 0 Microsoft Internet Explorer 9.x Microsoft Internet Explorer 8.x Microsoft Internet...
CVE-2012-4787
Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that 1 was not properly initialized or 2 is deleted, aka "Improper Ref Counting Use After Free Vulnerability."...
CVE-2012-4787
CVE-2012-4787 is a use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 caused by improper ref counting when accessing an object that is not properly initialized or has been deleted. A remote attacker could trigger code execution by convincing a user to open a crafted webpage. The...
Microsoft Internet Explorer Multiple Vulnerabilities (2761465)
This host is missing a critical security update according to Microsoft Bulletin MS12-077. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Internet Explorer Improper Ref Counting Use After Free (MS12-077; CVE-2012-4787)
A remote code execution vulnerability has been reported in Internet Explorer...
MS12-077: Cumulative Security Update for Internet Explorer (2761465)
The remote host is missing Internet Explorer IE Security Update 2761465. The installed version of IE is affected by vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63224;...
ZDI-12-014 : HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-014 : HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-014 January 12, 2012 - -- CVE ID: CVE-2011-4787 - -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -...