56 matches found
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4837)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4837 advisory. - x86/tsx: Add config options to set tsx=on|off|auto Michal Hocko Orabug: 30419233 CVE-2019-11135 - x86/speculation/taa: Add documentation for TSX...
CVE-2017-4837
CVE-2017-4837: This entry is rejected/not used and does not represent an active vulnerability.
Solaris 10 (sparc) : 120272-31
SunOS 5.10: SMA patch. Date this patch was last updated by Sun : Jun/30/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2018-4837
The connected sources confirm CVE-2018-4837 affects Siemens TeleControl Server Basic versions prior to 3.1, where a vulnerability in the webserver (ports 80/443) can cause a Denial-of-Service without affecting other functionality. The ICSA advisory reiterates this as a DoS risk via the webserver,...
CVE-2016-4837
SQL injection vulnerability in the Seed Coupon plugin before 1.6 for EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2016-4837
The CVE-2016-4837 issue affects the EC-CUBE ecosystem: the Seed Coupon plugin (Coupon Plugin) is vulnerable to SQL injection (CWE-89) in versions before 1.6. The underlying flaw allows a remote attacker to manipulate or access database data via unspecified vectors. Impact is high, with potential ...
CVE-2015-4837
CVE-2015-4837 affects Oracle Solaris 11.2, specifically the Utility/Security component. The vulnerability is described as unspecified with local access required and potential impact to confidentiality, integrity, and availability. The connected sources indicate the patch/update context is Oracle’...
CVE-2014-4837
Cross-site scripting XSS vulnerability in NewDocument.jsp in IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2, 3.3.1 before 3.3.1.3, 3.3.2 before 3.3.2.2, and 3.4 before 3.4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...
CVE-2014-4837
Technical details about CVE-2014-4837 are not publicly provided in the supplied documents. Monitor for updates.
HP LoadRunner Virtual User Generator EmulationAdmin service directory traversal
Added: 12/18/2013 CVE: CVE-2013-4837 BID: 63475 OSVDB: 99231 Background HP LoadRunner is a software performance testing solution. Problem A directory traversal vulnerability in the Virtual User Generator EmulationAdmin service allows remote attackers to upload files to arbitrary locations using t...
HP LoadRunner Virtual User Generator EmulationAdmin service directory traversal
Added: 12/18/2013 CVE: CVE-2013-4837 BID: 63475 OSVDB: 99231 Background HP LoadRunner is a software performance testing solution. Problem A directory traversal vulnerability in the Virtual User Generator EmulationAdmin service allows remote attackers to upload files to arbitrary locations using t...
CVE-2013-4837
creationtimestamp| type| source ---|---|--- 2013-12-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30209 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hploadrunnercopyfiletoserver.rb 2025-02-06...
HP LoadRunner EmulationAdmin Web Service Directory Traversal
This module exploits a directory traversal vulnerability in version 11.52 of HP LoadRunner. The vulnerability exists in the EmulationAdmin web service, specifically in the copyFileToServer method, allowing the upload of arbitrary files. This module has been tested successfully on HP LoadRunner...
CVE-2013-4837
Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832...
CVE-2013-4837
HP LoadRunner CVE-2013-4837 affects the Virtual User Generator (VUG) prior to version 11.52, enabling remote code execution via unknown vectors (ZDI-CAN-1832). Multiple connected advisories corroborate a broader EmulationAdmin exposure in HP LoadRunner 11.52-era deployments, including a directory...
CVE-2012-4837
IBM Cognos BI is vulnerable to XPath injection (read arbitrary XML) for versions 8.4.1 before IF1, 10.1 before IF2, 10.1.1 before IF2, and 10.2 before IF1. The issue arises from improper input validation prior to XPath query use and requires remote authenticated access. Remediation: apply Cognos ...
CVE-2011-4837
CVE-2011-4837 describes a Cross-site request forgery (CSRF) in the HomeSeer HS2 web interface (/ctrl) that allows an attacker to hijack admin authentication and perform actions, including executing arbitrary programs, on HS2 2.5.0.20. The available sources confirm the vulnerability and affected v...
CVE-2010-4837
Cross-site scripting XSS vulnerability in the JSupport comjsupport component 1.5.6 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the subject parameter title field in a saveTicket action to index2.php. NOTE: some of these details are obtained from third party...