48 matches found
CVE-2018-4847
The CVE concerns SIMATIC WinCC OA Operator iOS App (all versions prior to v1.4). Affected component: the app’s data directory where sensitive information (e.g., session keys) can be read if an attacker has physical access. Root cause: Insufficient protection of sensitive information leading to in...
Siemens SIMATIC WinCC OA Operator IOS App (Update A)
1. EXECUTIVE SUMMARY CVSS v3 4.0 Vendor : Siemens Equipment : SIMATIC WinCC OA iOS App Vulnerability : File and Directory Information Exposure. 2 UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-18-109-01 Siemens SIMATIC WinCC OA Operator iOS App that...
CVE-2008-4847
CVE-2008-4847 is rejected/not used as an active vulnerability entry.
CVE-2016-4847
Cross-site scripting XSS vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by leveraging an unanchored regex...
CVE-2016-4847
Cross-site scripting XSS vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by leveraging an unanchored regex...
CVE-2016-4847
CVE-2016-4847 concerns OSSEC Web UI, where site/search.php is vulnerable to cross-site scripting due to an unanchored regex. Affected product: OSSEC Web UI prior to version 0.9. The root cause is an unanchored regex that allows injection of arbitrary script/HTML. Documented impact: arbitrary scri...
CVE-2016-4847
Cross-site scripting XSS vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by leveraging an unanchored regex...
Siemens SIMATIC NET PCSoftware Denial of Service Vulnerability
SIMATIC NET is an open and multifaceted communication system provided by Siemens at the industrial control level. A denial of service vulnerability exists in Siemens SIMATIC NET PCSoftware. An attacker can exploit the vulnerability by sending specially crafted packets to ports...
CVE-2015-4847
CVE-2015-4847 affects Oracle Supply Chain Products Suite versions 12.0.6, 12.1.3, 12.2.3, and 12.2.4, via the Oracle Configurator component. The vulnerability allows remote attackers to compromise integrity through OCI-related vectors. Exploitation details are not fully disclosed; vulnerability c...
CVE-2014-4847
CVE-2014-4847 concerns a cross-site scripting (XSS) flaw in the WordPress plugin “Random Banner” version 1.1.2.1. The vulnerability allows a remote attacker to inject arbitrary web script or HTML via the buffercode_RBanner_url_banner1 parameter in an update action to wp-admin/options.php. Affecte...
CVE-2014-4847
Cross-site scripting XSS vulnerability in the Random Banner plugin 1.1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the buffercodeRBannerurlbanner1 parameter in an update action to wp-admin/options.php...
CVE-2012-4847
CVE-2012-4847 affects IBM Cognos BI 8.4 and 8.4.1. A remote authenticated user can cause high CPU usage via a crafted request containing a zero-valued byte, yielding a partial denial of service. According to IBM, exploitation requires authentication and it does not apply to Cognos BI 10.1 and lat...
CVE-2011-4847
CVE-2011-4847 describes an SQL injection in the Control Panel of Parallels Plesk Panel 10.4.4_build20111103.18. The vulnerability can be exploited remotely by sending a crafted certificateslist cookie to notification@/, potentially allowing arbitrary SQL execution with partial confidentiality/int...
CVE-2010-4847
CVE-2010-4847 affects MH Products MHP Downloadshop. A SQL injection in view_item.php via the ItemID parameter allows remote attackers to execute arbitrary SQL commands. Root cause: lack of input validation in the vulnerable script. Impact: as described, arbitrary SQL execution with affected privi...
CVE-2010-4847
creationtimestamp| type| source ---|---|--- 2010-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15756...
CVE-2009-4847
CVE-2009-4847 affects the Deliantra Server prior to version 2.82. The issue allows remote authenticated users to cause a denial of service (daemon crash) via vectors involving an empty treasure list. The connected documents confirm the vulnerability’s existence and basic impact but do not provide...
Ipswitch WS_FTP Server 5.05 - XMD5 Overflow (Metasploit)
$Id: wsftpserver505xmd5.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Ipswitch WS_FTP Server 5.05 XMD5 Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Ipswitch WSF...