CVE-2015-4802

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4792...

CVE-2015-4802

Technical details about CVE-2015-4802 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and security databases to obtain explicit affected versions, impact, and remediation.

CVE-2015-4802

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4792...

CVE-2015-4792

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition, a different vulnerability than CVE-2015-4802...

CVE-2014-4802

The Saved Search Admin component in the Process Admin Console in IBM Business Process Manager BPM 8.0 through 8.5.5 does not properly restrict task and instance listings in result sets, which allows remote authenticated users to bypass authorization checks and obtain sensitive information by...

CVE-2014-4802

IBM BPM Saved Search Admin in Process Admin Console (BPM 8.0–8.5.5) suffers an authorization vulnerability: authenticated users can obtain unfiltered result sets from saved searches, potentially exposing tasks and instances that they are not permitted to see. The weakness arises in the Saved Sear...

CVE-2013-4802

Cross-site scripting XSS vulnerability in HP Application Lifecycle Management ALM Quality Center before 11.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka ZDI-CAN-1565...

[security bulletin] HPSBGN02906 rev.1 - HP Application Lifecycle Management Quality Center (ALM), Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03864640 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03864640 Version: 1 HPSBGN02906 rev....

CVE-2013-4802

CVE-2013-4802 affects HP Application Lifecycle Management (ALM) Quality Center prior to v11.51. The flaw is a cross-site scripting (XSS) vulnerability due to improper sanitization of HTML messages, allowing remote attackers to inject arbitrary JavaScript via unspecified vectors. Exploitation requ...

Dolibarr < 3.1RC3 Multiple Vulnerabilities - Active Check

Dolibarr is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-4802

Dolibarr

CVE-2011-4802

creationtimestamp| type| source ---|---|--- 2011-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36331 2011-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36332 2011-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36333...

[SECURITY] [DSA 2239-1] libmojolicious-perl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2239-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 24, 2011 http://www.debian.org/security/faq -...

CVE-2010-4802

CVE-2010-4802 affects Mojolicious (libmojolicious-perl) up to version 0.999928. Root cause: improper CGI environment detection in Commands.pm, leading to unspecified impact and remote attack vectors. Mitigation per Debian DSA-2239-1: upgrade to fixed packages (stable: 0.999926-1+squeeze2; sid: 1....

CVE-2009-4802

CVE-2009-4802 affects the TYPO3 Flat Manager (flatmgr) extension prior to version 1.9.16. It allows remote SQL injection via unspecified vectors, enabling attackers to execute arbitrary SQL commands. Remediation: upgrade to flatmgr 1.9.16 or later (per sources). The connected Red Hat/NVD entries ...

CVE-2008-4802

CVE-2008-4802 is described as a Cross-site scripting (XSS) vulnerability in complete.php of Simple PHP Scripts blog 0.3, where an attacker can inject arbitrary script or HTML via the id parameter. The root cause is unsanitized user input in that parameter. Affected product/component: Simple PHP S...

Debian Security Advisory DSA 1216-1 (flexbackup)

The remote host is missing an update to flexbackup announced via advisory DSA 1216-1. Eric Romang discovered that the flexbackup backup tool creates temporary files in an insecure manner, which allows denial of service through a symlink attack. OpenVAS Vulnerability Test $Id: deb12161.nasl 6616...

openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-4802)

This update of OpenOfficeorg adds restrictions to SQL statements of Java-based databases to avoid the execution of native Jave code by creating procedures. CVE-2007-4575 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

CVE-2007-4802

CVE-2007-4802 affects GlobalLink 2.7.0.8 (glItemCom.dll, glitemflat.dll). The issue is multiple heap-based buffer overflows that allow remote attackers to execute arbitrary code via: (1) a long eighth argument to SetInfo in glItemCom.dll and (2) a long second argument to SetClientInfo in glitemfl...

Debian DSA-1216-1 : flexbackup - insecure temporary file

Eric Romang discovered that the flexbackup backup tool creates temporary files in an insecure manner, which allows denial of service through a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...