66 matches found
Debian DSA-4824-1 : chromium - security update
Multiple security issues were discovered in the Chromium web browser, which could result in the execution of arbitrary code, denial of service or information disclosure. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
CVE-2019-4824
This CVE entry is rejected/not used; it does not represent an active vulnerability.
Security Bulletin: SQL Injection and Incorrect Handling of SSH Connection vulnerability in QRadar (CVE-2014-4824, CVE-2014-4826)
Summary IBM QRadar 7.2 MR2 contains SQL Injection and Incorrect Handling of SSH Connection vulnerabilities . Vulnerability Details CVE ID: CVE-2014-4824 DESCRIPTION: IBM QRadar is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the...
CVE-2013-4824
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/hp/hpimcsomcreateaccount.rb 2025-02-06 03:13:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:21+00:00| seen|...
CVE-2017-4824
CVE-2017-4824 is rejected/not used per the initial description and does not represent an active vulnerability entry.
CVE-2016-4824
The CVE-2016-4824 issue affects Corega CG-WLR300GNV and CG-WLR300GNV-W wireless routers. The WPS PIN authentication implementation does not limit the number of attempts, enabling authenticated brute-force attempts from within wireless range to recover the PIN and gain network access. Affected com...
CVE-2015-4824
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...
CVE-2015-4824
CVE-2015-4824 is an Unspecified vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite 9.3.4. The impact is confidentiality, stated as affecting remote authenticated users; vectors are unknown. The NVD entry lists a low CVSS v2 base score (2.1) with network access a...
CVE-2014-4824
IBM QRadar SIEM vulnerability CVE-2014-4824: SQL injection in QRadar 7.2 MR2 that allows remote authenticated users to execute arbitrary SQL via unspecified vectors. Affected product: IBM QRadar SIEM (7.2 MR2; patched in 7.2.3 Patch 1). Root cause: improper handling of SQL statements in the back-...
CVE-2014-4824
SQL injection vulnerability in IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
HP Intelligent Management Center SOM euAccountSerivce Authentication Bypass (CVE-2013-4824)
An authentication bypass vulnerability exists in the SOM add-in module of HP Intelligent Management Center...
CVE-2013-4824
HP Intelligent Management Center (iMC) and HP IMC Service Operation Management Software Module contain an authentication bypass in the AccountService RpcServiceServlet (CVE-2013-4824). The vulnerability allows remote attackers to bypass authentication and can enable account creation/manipulation,...
HP Intelligent Management SOM Account Creation
This module exploits a lack of authentication and access control in HP Intelligent Management, specifically in the AccountService RpcServiceServlet from the SOM component, in order to create a SOM account with Account Management permissions. This module has been tested successfully on HP...
CVE-2012-5307
Cross-site scripting XSS vulnerability in servlet/traveler in IBM Lotus Notes Traveler before 8.5.3.3 Interim Fix 1, when Firefox is used, allows remote attackers to inject arbitrary web script or HTML via the redirectURL parameter, a different vulnerability than CVE-2012-4824 and CVE-2012-4825...
CVE-2012-4824
CVE-2012-4824: Open redirect in IBM Lotus Notes Traveler 8.5.3 prior to 8.5.3.3 Interim Fix 1; a remote attacker can cause user navigation to an arbitrary site via redirectURL in servlet/traveler. Impact: phishing risk; no exploitation details provided. Mitigation: apply IBM 8.5.3.3 Interim Fix 1...
CVE-2010-4824
SQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when the Translatable extension is enabled, allows remote attackers to execute arbitrary SQL commands via the locale parameter...
CVE-2010-4824
The CVE-2010-4824 entry concerns SilverStripe (core) with the Translatable extension enabled. A SQL injection exists in the augmentSQL method of core/model/Translatable.php, affecting SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, allowing remote attackers to execute arbitrary SQL comma...
CVE-2010-4824
SQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when the Translatable extension is enabled, allows remote attackers to execute arbitrary SQL commands via the locale parameter...
FreeBSD Ports: cacti
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...