53 matches found
Design/Logic Flaw
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787...
CVE-2011-4787
CVE-2011-4787 concerns a vulnerability in HP Easy Printer Care Software prior to or including version 2.5, specifically an ActiveX control in HPTicketMgr.dll. The description states that this control allows remote attackers to download an arbitrary program onto a client machine and execute it via...
Design/Logic Flaw
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787...
CVE-2010-4787
The vulnerability CVE-2010-4787 affects IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005). A remote authenticated user can trigger a denial of service (daemon hang) via a paged search that triggers improper mutex processing. The available records confirm the affe...
Pligg Cross Site Scripting And Request Forgery Remote Vulnerabilities
Pligg is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability. An attacker can exploit these issues to steal cookie-based authentication credentials or perform unauthorized actions when masquerading as the victim. Other attacks are also possible...
CVE-2008-4787
Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many Non-Blocking Space character sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025...
CVE-2008-4787
CVE-2008-4787 describes a visual truncation/address-bar spoofing issue in Microsoft Internet Explorer 6. The vulnerability occurs when a hostname contains many characters, which render as whitespace, enabling a page to appear at a different address than its actual content. The entry cites MSRC789...
CVE-2008-4787
creationtimestamp| type| source ---|---|--- 2008-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32539...
CVE-2007-4787
CVE-2007-4787 affects Sophos Anti-Virus (prior to 2.49.0) where the virus detection engine fails to properly process malformed CAB, LZH, and RAR archives with modified headers, potentially allowing remote attackers to bypass malware detection. The vulnerability resides in the archive-processing l...
CVE-2006-4787
AlphaMail before 1.0.16 is affected. The issue stems from the logging functionality which displays unencrypted passwords in an error message, enabling local users to obtain sensitive information. Impact is partial confidentiality loss for logs and any interpolated data. Exploitation is described ...
CVE-2005-4787
Turnkey Web Tools SunShop Shopping Cart is affected by CVE-2005-4787 via endpoints that execute PHP’s phpinfo() (index.php, admin/index.php, admin/adminindex.php), potentially exposing sensitive information. The root cause is the direct invocation of phpinfo() in these pages, enabling information...
