53 matches found
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2019-4850)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-4850 advisory. - vhost: make sure lognum innum yongduan Orabug: 30312787 CVE-2019-14835 - vhost: block speculation of translated descriptors Michael S. Tsirkin...
CVE-2018-4850
A vulnerability has been identified in SIMATIC S7-400 incl. F CPU hardware version 4.0 and below All versions, SIMATIC S7-400 incl. F CPU hardware version 5.0 All firmware versions V5.2, SIMATIC S7-400H CPU hardware version 4.5 and below All versions. The affected CPUs improperly validate S7...
CVE-2018-4850
The vulnerability CVE-2018-4850 affects Siemens SIMATIC S7-400 family CPUs (incl. F) and S7-400H with specific hardware/firmware versions. The root cause is improper validation of S7 communication packets, which could allow a remote attacker to cause a Denial-of-Service, with affected CPUs enteri...
CVE-2018-4850
creationtimestamp| type| source ---|---|--- 2018-05-16 10:59:55+00:00| seen| https://t.me/SecLabNews/2201...
CVE-2017-4850
CVE-2017-4850 entry is rejected/not used and does not represent an active vulnerability.
CVE-2016-4850
LINE for Windows before 4.8.3 allows man-in-the-middle attackers to execute arbitrary code...
CVE-2016-4850
LINE for Windows prior to version 4.8.3 is vulnerable to a man-in-the-middle attack due to the auto-update/downloaded-file verification flaw, allowing arbitrary code execution. The issue arises from the updater not properly verifying downloaded files, as documented in JVN/JVNDB notes and echoed b...
CVE-2016-4850
LINE for Windows before 4.8.3 allows man-in-the-middle attackers to execute arbitrary code...
Siemens SIMATIC NET PCSoftware Denial of Service Vulnerability
SIMATIC NET is an open and multifaceted communication system provided by Siemens at the industrial control level. A denial of service vulnerability exists in Siemens SIMATIC NET PCSoftware. An attacker can exploit the vulnerability by sending specially crafted packets to ports...
CVE-2015-4850
CVE-2015-4850 concerns Oracle PeopleSoft Products 9.2, specifically the PeopleSoft Enterprise HCM component. The vulnerability is described as unspecified with impact to confidentiality and integrity, exploitable by remote authenticated users via unknown vectors in Talent Acquisition Management. ...
CVE-2014-4850
SQL injection vulnerability in index.php in FoeCMS allows remote attackers to execute arbitrary SQL commands via the i parameter...
CVE-2014-4850
CVE-2014-4850 is a SQL injection vulnerability in the FoeCMS file index.php, exploitable via the i parameter to execute arbitrary SQL commands. Multiple connected sources (NVD, Red Hat advisory, CVE lists) confirm the affected component as FoeCMS and the root cause as unsafely interpolated SQL, e...
IBM WebSphere Application Server 远程权限提升漏洞(CVE-2012-4850)
Bugtraq ID:56460 CVE ID:CVE-2012-4850 IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。 IBM WebSphere Application Server 8.5 Liberty Profile 8.5.0.1之前版本，在使用JAX-RS时，由于不正确校验请求，允许远程攻击者利用漏洞获得高权限。 0 IBM WebSphere Application Server 8.5 用户可参考如下厂商提供的安全公告获得补丁信息：...
CVE-2012-4850
IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1, when JAX-RS is used, does not properly validate requests, which allows remote attackers to gain privileges via unspecified vectors...
CVE-2012-4850
CVE-2012-4850 – IBM WebSphere Application Server Liberty Profile : In versions before 8.5.0.1, when using JAX-RS, requests are not properly validated, allowing remote attackers to gain elevated privileges. The issue is documented in the IBM WebSphere security bulletin and linked advisories, with ...
CVE-2011-4850
The CVE-2011-4850 entry affects Parallels Plesk Panel 10.4.4_build20111103.18, where the HTTPOnly flag is absent in a Set-Cookie header used by cookies (e.g., in help.php), allowing remote attackers to access cookie data via script. This could partially expose sensitive information as described. ...
CVE-2009-4850
creationtimestamp| type| source ---|---|--- 2010-09-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16570 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/awingsoftwinds3dsceneurl.rb 2025-02-06...