57 matches found
CVE-2015-4833
CVE-2015-4833: An unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier could allow remote authenticated users to affect availability via unknown vectors in the Server:Partition component. Mitigation: update to patched MySQL 5.6.29+ (e.g., Fedora/Amazon advisories list 5.6.29 addres...
CVE-2014-4833
CVE-2014-4833 affects IBM QRadar/QRM/QVM: remote authenticated attackers can gain elevated privileges due to improper input validation in QRadar components. The IBM Security bulletin lists affected products as QRadar/QRM/QVM 7.2 MR2 and QRadar/QRM 7.1 MR1, with fixes provided per release: 7.1 MR2...
AIX 6.1 TL 9 : bos.rte.filesystem (U854544)
The remote host is missing AIX PTF U854544, which is related to the security of the package bos.rte.filesystem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U854544. The text itself is copyright C...
CVE-2013-4833
HP Service Manager versions 9.30–9.32 contain a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The vulnerability affects HP Service Manager and is associated with HP Security Bulletin HPSBMU02931 rev.2, which n...
AIX 7.1 TL 1 : bos.rte.filesystem (U854868)
The remote host is missing AIX PTF U854868, which is related to the security of the package bos.rte.filesystem. IBM AIX is vulnerable to a denial of service, caused by improper restrictions on the fuser command. A local attacker could exploit this vulnerability via the -k argument to kill a proce...
AIX 6.1 TL 8 : fuser (IV29289)
IBM AIX is vulnerable to a denial of service, caused by improper restrictions on the fuser command. A local attacker could exploit this vulnerability via the -k argument to kill a process of another user. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extract...
CVE-2012-4833
CVE-2012-4833 affects IBM AIX 6.1 and 7.1 (and related VIOS) where fuser/ -k is improperly restricted, allowing a local attacker to kill another user’s processes and cause a denial of service. The connected Nessus advisories (e.g., U854841/U854868/U854603 for bos.rte.filesystem and IV28756/IV2874...
CVE-2011-4833
Multiple SQL injection vulnerabilities in the Leads module in SugarCRM 6.1 before 6.1.7, 6.2 before 6.2.4, 6.3 before 6.3.0RC3, and 6.4 before 6.4.0beta1 allow remote attackers to execute arbitrary SQL commands via the 1 where and 2 order parameters in a getfulllist action to index.php...
CVE-2011-4833
creationtimestamp| type| source ---|---|--- 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36384...
CVE-2010-4833
Untrusted search path vulnerability in modules/engines/ms-windows/xptheme.c in GTK+ before 2.24.0 allows local users to gain privileges via a Trojan horse uxtheme.dll file in the current working directory, a different vulnerability than CVE-2010-4831...
CVE-2010-4833
CVE-2010-4833 affects GTK+ on Windows and is an untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c. GTK+ versions before 2.24.0 allow local users to gain privileges by placing a Trojan horse uxtheme.dll in the current working directory. This is a separate issue from CVE-...
CVE-2009-4833
CVE-2009-4833 affects MySQL Connector/NET prior to 6.0.4 where, when using encryption, the client does not verify SSL certificates during the connection, enabling a remote attacker to perform a man-in-the-middle attack with a spoofed SSL certificate. The OpenVAS entries corroborate a SSL certific...
CVE-2007-4833
Technical details about CVE-2007-4833 are not publicly available in the provided documents; no affected products, vulnerable component specifics, or remediation information are disclosed here. Monitor for updates.
CVE-2005-4833
The affected product is IBM WebSphere Application Server 6.0 prior to 20050201, vulnerable when serving pages in an Application WAR or an Extended Document Root. The root cause is lack of URL normalization, allowing remote attackers to access the JSP source code and other sensitive information vi...
CVE-2006-4833
The CVE-2006-4833 entry concerns Verso NetPerformer FRAD ACT SDM-95xx (R1 and earlier, 7.xx), SDM-93xx (R2 and earlier, 10.x.x), and SDM-92xx (R1 and earlier, 9.x.x). It describes a remote denial of service caused by sending an ICMP packet with the same destination and source address and port (th...
