SUSE SLES11 Security Update : dosfstools (SUSE-SU-2016:2146-1)

dosfstools was updated to fix two security issues. These security issues were fixed : - CVE-2015-8872: The setfat function in fat.c in dosfstools might have allowed attackers to corrupt a FAT12 filesystem or cause a denial of service invalid memory read and crash by writing an odd number of...

Fedora 23 : dosfstools (2016-e2d635cbf8)

This is an update fixing off-by-2 error leading to corruption in FAT12 CVE-2015-8872 and heap-buffer-overflows in readfat and getfat functions CVE-2016-4804. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable ha...

CVE-2016-4804

CVE-2016-4804 (dosfstools) affects dosfstools prior to 4.0. The vulnerability is in read_boot (boot.c) and can cause a denial of service (crash) via a crafted filesystem, due to a heap-based buffer overflow in read_fat or an out-of-bounds heap read in get_fat. Affected component: dosfstools read_...

CVE-2016-4804

The readboot function in boot.c in dosfstools before 4.0 allows attackers to cause a denial of service crash via a crafted filesystem, which triggers a heap-based buffer overflow in the 1 readfat function or an out-of-bounds heap read in 2 getfat function...

CVE-2015-4804

Technical details for CVE-2015-4804 are not provided in the connected documents; no affected products, vectors, or fixes are specified. Monitor for updates.

CVE-2015-4804

Unspecified vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Management component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...

Fedora Update for tcpdump FEDORA-2015-4804

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-4804

Curam Universal Access in IBM Curam Social Program Management 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4.5 before iFix007, 6.0.5.4 before iFix005, and 6.0.5.5 before iFix003, when SPI inclusion is enabled, allows remote attackers to obtain sensitive user data by visiting an unspecified page...

CVE-2014-4804

CVE-2014-4804 affects IBM Curam Social Program Management (Cúram SPM) – Curam Universal Access when SPI is enabled. A page with SPI included can allow a remote attacker to obtain sensitive user data. Affected versions include 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4.5 before iFix007, 6.0.5....

CVE-2013-4804

HP Business Process Monitor (BPM) vulnerable to remote code execution and information disclosure as described for CVE-2013-4804. Affected software versions on Windows are BPM 9.13.1 patch 1 and BPM 9.22 patch 1. The root cause is not explicitly detailed in the description, but the HP Security Bul...

CVE-2011-4804

creationtimestamp| type| source ---|---|--- 2012-01-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36598...

CVE-2011-4804

Directory traversal vulnerability in the obSuggest comobsuggest component before 1.8 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2011-4804

CVE-2011-4804 describes a directory traversal (local file inclusion) vulnerability in Joomla! component obSuggest (com_obsuggest) prior to version 1.8. An attacker can use a .. in the controller parameter to index.php to read arbitrary local files. The issue affects the Joomla! obSuggest componen...

Android 'content://' URI Multiple Information Disclosure Vulnerabilities

No description provided by source. Android Data Stealing Web PageClick: Malicious Link"; // Stage 1: Redirect to Stage 2 whi...

Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities

Android Data Stealing Web PageClick: Malicious Link"; // Stage 1: Redirect to Stage 2 which will force a download of the HTML/JS payload, then a few seconds later redirect // to the payload. We lo...

CVE-2010-4804

CVE-2010-4804 affects Android’s built-in browser prior to 2.3.4, enabling remote attackers to read SD card contents via crafted content:// URIs. Root cause involves BrowserActivity.java and BrowserSettings.java in com/android/browser/. The connected sources confirm affected version range and the ...

Sql injection

SQL injection vulnerability in pdf.php in AuraCMS 1.62 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-4804 and CVE-2007-4171...

CVE-2009-4804

Cross-site scripting XSS vulnerability in the Calendar Base cal extension before 1.1.1 for TYPO3, when Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via "search parameters."...

CVE-2009-4804

CVE-2009-4804 is an XSS vulnerability in the TYPO3 Calendar Base (cal) extension, present in versions before 1.1.1 when Internet Explorer 6 is used. The issue allows an attacker to inject arbitrary script/HTML via the "search parameters" in the affected interface. Connected documents corroborate ...

CVE-2008-4804

The CVE-2008-4804 entry describes an SQL injection in the Gallery module 1.3 for PHP-Nuke, allowing remote attackers to execute arbitrary SQL via the aid parameter in showalbum (index.php). Affected component: Gallery module 1.3 for PHP-Nuke; root cause: unsanitized input in the showalbum action ...