56 matches found
CVE-2010-4832
The CVE-2010-4832 issue affects Android OS prior to 2.2, where an incorrect SSL certificate may be displayed in certain cases, allowing remote attackers to spoof trusted sites. The root cause is that certificate verification could be performed against the certificate of the last loaded resource o...
CVE-2013-4832
Summary of CVE-2013-4832 (HP Service Manager) Affected products: HP Service Manager versions 9.30 through 9.32. The vulnerability allows remote authenticated users to obtain sensitive information via unspecified vectors. The issue is documented with a NVD CVSS v2 base score of 4.0 (Medium) and ve...
Fedora Update for thunderbird FEDORA-2013-4832
Check for the Version of thunderbird OpenVAS Vulnerability Test Fedora Update for thunderbird FEDORA-2013-4832 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Fedora Update for thunderbird FEDORA-2013-4832
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-4832
Directory traversal vulnerability in CaupoShop Pro 2.x, CaupoShop Classic 3.01, and CaupoShop Pro 3.70 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the template parameter in a template action...
CVE-2011-4832
CVE-2011-4832 affects CaupoShop Pro 2.x, CaupoShop Classic 3.01, and CaupoShop Pro 3.70 and earlier. A directory traversal/local file inclusion occurs via the template parameter in a template action, allowing remote attackers to read arbitrary files on the server. OpenVAS entries describe this as...
CaupoShop 'template' Parameter Local File Include Vulnerability
CaupoShop is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the Web server process. This may all...
CVE-2009-4832
The dlpcrypt.sys kernel driver 0.1.1.27 in DESlock+ 4.0.2 allows local users to gain privileges via a crafted IOCTL 0x80012010 request to the DLPCryptCore device...
CVE-2009-4832
CVE-2009-4832 affects the dlpcrypt.sys kernel driver (version 0.1.1.27) in DESlock+ 4.0.2. The vulnerability allows local privilege escalation via a crafted IOCTL 0x80012010 sent to the DLPCryptCore device. Documents identify the affected component and the exact IOCTL vector but do not provide ex...
CVE-2009-4832
creationtimestamp| type| source ---|---|--- 2009-06-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8983...
CVE-2008-4832
CVE-2008-4832 affects rc.sysinit in initscripts (versions 8.12-8.21 and 8.56.15-0.1 on rPath). The vulnerability stems from a race condition tied to an improper fix for CVE-2008-3524, enabling local users to delete arbitrary files via a symlink attack on a directory under /var/lock or /var/run. E...
openSUSE 10 Security Update : clamav (clamav-4832)
This version upgrade to 0.92 fixes numerous flaws including some security problems CVE-2007-6335, CVE-2007-6336, CVE-2007-6337. Please note that the version number of the clamav library has changed. Programs linked against libclamav therefore need to be updated as well. %NASLMINLEVEL 70300 C...
CVE-2007-4832
CVE-2007-4832 affects CellFactor Revolution (≤1.03). It is a format-string vulnerability in a nickname field that enables remote code execution. Reported CVSSv2 base score 7.5 (HIGH) with network access and minimal user interaction. Public references detail the vulnerability, but no remediation v...
CVE-2005-4832
The CVE-2005-4832 entry concerns SQL injection in Oracle Database Server 10g impacting the SYS.DBMS_CDC_SUBSCRIBE and SYS.DBMS_CDC_ISUBSCRIBE packages, via the SUBSCRIPTION_NAME parameter. Connected sources confirm remote authenticated exploitation that can lead to arbitrary SQL execution with el...
