55 matches found
Security Bulletin: A vulnerability in IBM Spectrum Scale allows to inject malicious content into log files (CVE-2020-4851)
Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale HDFS Transparency that could allow a local attacker to inject malicious content into log files. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4851 DESCRIPTION: IBM Spectrum...
Debian DSA-4851-1 : subversion - security update
Thomas Akesson discovered a remotely triggerable vulnerability in the modauthzsvn module in Subversion, a version control system. When using in-repository authz rules with the AuthzSVNReposRelativeAccessFile option an unauthenticated remote client can take advantage of this flaw to cause a denial...
CVE-2019-4851
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2018-4851
creationtimestamp| type| source ---|---|--- 2018-07-04 11:11:53+00:00| seen| https://t.me/SecLabNews/2580...
CVE-2018-4851
The CVE-2018-4851 issue affects Siemens SICLOCK TC100 and TC400 (all versions). An attacker with network access can trigger a Denial-of-Service by sending specific packets, potentially rebooting the device and impacting core functionality. Time-serving resumes after time synchronization with GPS ...
pogo.com XSS vulnerability
Vulnerable URL: http://www.pogo.com/form///sent-recover-screenname.jsp?email=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4851 VIP website status:| Yes Coordinated Disclosure...
CVE-2016-4851
The CVE-2016-4851 entry concerns a Cross-site scripting (XSS) vulnerability in Let’s PHP! simple chat, prior to 2016-08-15, allowing remote attackers to inject arbitrary scripts via unspecified vectors. Affected software is the simple chat application (Let's PHP!) with the impact being arbitrary ...
[ERPSCAN-15-030] Oracle E-Business Suite - XXE injection Vulnerability
ADVISORY INFORMATION Title: Oracle E-Business Suite XXE injection Advisory ID: ERPSCAN-15-030 Advisory URL: http://erpscan.com/advisories/erpscan-15-030-oracle-e-business-suite-xxe-injection-vulnerability/ Date published: 20.10.2015 Vendors contacted: Oracle 2. VULNERABILITY INFORMATION Class:...
CVE-2015-4851
Unspecified vulnerability in the Oracle iSupplier Portal component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to XML input. NOTE: the previous information is from the October 2015...
CVE-2015-4851
CVE-2015-4851 affects Oracle E-Business Suite iSupplier Portal (e.g., 12.1.3) with XML input handling vulnerability leading to possible XML External Entity (XXE) conditions. Public sources (ERPScan advisory ERPSCAN-15-030 and related vulnerability listings) describe an XXE injection vector that c...
Oracle E-Business Suite - XXE injection vulnerability
Application: E-Business Suite Vendor URL: Oracle Bugs: XXE injection Reported: 17.07.2015 Vendor response: 24.07.2015 Date of Public Advisory:20.10.2015 Reference: Oracle CPU Oct 2015 Authors: Nikita Kelesis, Ivan Chalykin, Alexey Tyurin ERPScan VULNERABILITY INFORMATION Class: XML External Entit...
CVE-2014-4851
CVE-2014-4851 describes an open redirect in the FoeCMS component msg.php, where an attacker can use the r parameter to redirect victims to arbitrary sites, enabling phishing-like scenarios. The description and related records consistently refer to this vulnerability as an open redirect in FoeCMS ...
Debian DSA-2743-1 : kfreebsd-9 - privilege escalation/information leak
Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a privilege escalation or information leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-3077 Clement Lecigne from the Google Security Team reported an integer...
[SECURITY] [DSA 2743-1] kfreebsd-9 security update
---------------------------------------------------------------------- Debian Security Advisory DSA-2743-1 [email protected] http://www.debian.org/security/ Aurelien Jarno August 27, 2013 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
Debian Security Advisory DSA 2743-1 (kfreebsd-9 - privilege escalation/information leak)
Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a privilege escalation or information leak. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-3077 Clement Lecigne from the Google Security Team reported an integer...
FreeBSD 'nfsserver' Module 访问绕过漏洞(CVE-2013-4851)
Bugtraq ID:61484 CVE ID:CVE-2013-4851 FreeBSD是一款基于BSD的操作系统 FreeBSD存在安全漏洞，允许恶意用户绕过部分安全限制 问题是由于内核不正确使用客户端提供的验证凭据，可允许远程客户端绕过安全限制，获得对受限资源的未授权访问 0 FreeBSD 9.x 厂商解决方案 用户可参考如下厂商提供的安全公告获得补丁信息： http://security.freebsd.org/advisories/FreeBSD-SA-13:08.nfsserver.asc...
CVE-2013-4851
The vfshangaddrlist function in sys/kern/vfsexport.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for host/subnet export entries on the basis of group information sent by the client, which allows remote attackers to bypass fil...