CVE-2011-4821

CVE-2011-4821 relates to a directory traversal flaw in the TFTP server of the D-Link DIR-601 Wireless N150 Home Router with firmware 1.02NA. The vulnerability allows remote attackers to read arbitrary files via unspecified vectors. The available sources do not specify a concrete exploit, affected...

HP System Management Homepage vulnerable to a denial-of-service condition

Overview HP System Management Homepage 7.2.0.14 and possibly earlier versions contain a denial-of-service vulnerability CWE-121. Description CWE-121: Stack-based Buffer Overflow HP System Management Homepage 7.2.0.14 contains a denial-of-service vulnerability. The remote attacker may send the...

CVE-2013-4821

CVE-2013-4821 affects HP System Management Homepage (SMH) prior to 7.2.1. It allows remote authenticated users to cause a denial of service via unspecified vectors. Public sources (NVD, Red Hat, CERT) describe a remote DoS impact with the HP Security Bulletin confirming a fix in SMH 7.2.1 (Window...

HP System Management Homepage < 7.2.1.0 Multiple Vulnerabilities (BEAST)

According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is a version prior to 7.2.1.0. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability, known as BEAST, exists in the SSL 3.0 and...

CVE-2012-4821

CVE-2012-4821 is one of several IBM JRE/Java SDK vulnerabilities (CVE-2012-4820/4821/4822/4823) affecting IBM products (e.g., WebSphere Real Time, Tivoli Monitoring, Tivoli Storage Productivity Center, and related IBM runtimes). The root cause is insecure use of Java reflection APIs (getDeclaredM...

Critical: Red Hat Security Advisory: java-1.7.0-ibm security update

Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

CVE-2010-4821

Summary (CVE-2010-4821) A cross-site scripting (XSS) vulnerability affects phpMyFAQ prior to 2.6.9. The issue allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php. The root cause is improper handling of PATH_INFO in the index entry point, leading to script...

SuSE 11.1 Security Update : NFS (SAT Patch Number 4821)

When using wildcards in /etc/exports an attacker could gain unauthorized access to an NFS exported filesystem by creating a DNS record that resolves to the attacker's IP as well as to a trusted IP. CVE-2011-2500 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2009-4821

CVE-2009-4821 affects the D-Link DIR-615 router (firmware 3.10NA). The vulnerability is that apply.cgi does not require administrative authentication, allowing remote attackers to (1) change the admin password via the admin_password parameter, (2) disable the Wi‑Fi security requirement via unspec...

Gentoo Security Advisory GLSA 200903-23 (netscape-flash)

The remote host is missing updates announced in advisory GLSA 200903-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200903-23 (netscape-flash)

The remote host is missing updates announced in advisory GLSA 200903-23. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

3COM Netbuilder Default Password (deprecated)

Binary data 4821.prm...

Adobe AIR APSB08-23 / APSB08-22 / APSB08-20 / APSB08-18 Multiple Vulnerabilities

Binary data 4760.prm...

Critical: Red Hat Security Advisory: flash-plugin security update

An updated Adobe Flash Player package that fixes several security issues is now available for Red Hat Enterprise Linux 3 and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 18th November 2008 This erratum has been updated to...

Adobe Flash Player Multiple Vulnerabilities - Nov08 (Linux)

This host has Adobe Flash Player installed and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvulnnov08lin.nasl 6539 2017-07-05 12:02:14Z cfischer $ Adobe Flash Player Multiple Vulnerabilities - Nov08 Linux Authors: Chandan S Copyright:...

Adobe Flash Player Multiple Vulnerabilities - Nov08 (Windows)

This host has Adobe Flash Player installed and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvulnnov08win.nasl 8178 2017-12-19 13:42:38Z cfischer $ Adobe Flash Player Multiple Vulnerabilities - Nov08 Windows Authors: Chandan S Copyrigh...

CVE-2008-4821

CVE-2008-4821 affects Adobe Flash Player 9.0.124.0 and earlier when used in Mozilla browsers; jar: URL handling could disclose sensitive information. The vulnerability is addressed by Red Hat advisories RHSA-2008:0980/0945, which require upgrading Flash Player to version 9.0.151.0. Exploitation d...

CVE-2007-5257

CVE-2007-5257 affects the EDraw Office Viewer Component (officeviewer.ocx) in the EDraw.OfficeViewer ActiveX control. The vulnerability is a stack-based/buffer overflow in the FtpDownloadFile method that can be triggered by long values in the first and second arguments, affecting versions up to 5...

CVE-2007-4821

CVE-2007-4821 affects the EDraw Office Viewer Component (officeviewer.ocx) version 5.2 (and earlier per related entries) and is caused by a buffer overflow in the HttpDownloadFileToTempDir method. The vulnerability allows remote attackers to execute arbitrary code by passing a long value as the f...

CVE-2005-4821

CVE-2005-4821 affects Land Down Under (LDU) 8.01 and earlier. The vulnerability is SQL injection in web parameters: m in auth.php, f in events.php, and e in plug.php, allowing remote attackers to alter or disclose data. The CVSS v2 base score is 7.5 (HIGH) with network access, no authentication, ...