55 matches found
CVE-2013-4851
CVE-2013-4851 affects the FreeBSD kernel NFS server: the vfs_hang_addrlist code in sys/kern/vfs_export.c may use client-supplied credentials instead of the exports(5) configured credentials when -network or -host restrictions apply, allowing a remote attacker to bypass file permissions on NFS fil...
CVE-2012-4851
CVE-2012-4851 affects IBM WebSphere Application Server Liberty Profile (8.5) with versions before 8.5.0.1. The issue is a cross-site scripting (XSS) vulnerability that lets remote attackers inject arbitrary web script or HTML via a crafted URI. The related connected IBM bulletin entries describe ...
CVE-2011-4851
The CVE-2011-4851 entry concerns Parallels Plesk Panel 10.4.4_build20111103.18. The Control Panel generates a password form field without disabling autocomplete, enabling attackers to bypass authentication on unattended workstations, as demonstrated by forms in server/google-tools/ and other file...
CVE-2010-4851
CVE-2010-4851 affects Eclime 1.1.2b. The OpenVAS/NVD entries document multiple SQL injection vulnerabilities in the web app, exploitable via (1) ref and (2) poll_id parameters to index.php and (3) country parameter to create_account.php. Attacks can lead to arbitrary SQL execution and exposure of...
CVE-2010-4851
creationtimestamp| type| source ---|---|--- 2010-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15644...
CVE-2009-4851
XOOPS Profiles Module vulnerability (pre-2.4.1) allows remote attackers to bypass administrative approval via activation resend: activation codes are sent in response to arbitrary activation requests (activate.php). Affects XOOPS Profiles Module; root cause is improper handling of activation requ...
SuSE9 Security Update : Tk (YOU Patch Number 11853)
This update fixes a buffer overflow that occurs while processing interlaced/animatedGIF images. CVE-2007-4851 This bug could be used to execute code remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc...
SuSE 10 Security Update : Tk (ZYPP Patch Number 4478)
This update fixes a buffer overflow that occurs while processing interlaced/animatedGIF images. CVE-2007-4851 This bug could be used to execute code remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc...
openSUSE 10 Security Update : tk (tk-4480)
This update fixes a buffer overflow that occurs while processing interlaced/animatedGIF images. CVE-2007-4851 This bug could be used to execute code remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
CVE-2005-4851
CVE-2005-4851 affects eZ publish versions 3.4.4–3.7 prior to 2005-07-22. The issue arises from permissions handling at the node level, which allows remote authenticated users to bypass original permissions on embedded objects in XML fields and read those objects. Documented impact is reading of e...
CVE-2006-4851
PHP remote file inclusion vulnerability in system/b/contentFiles/gBHTMLEditor.php in BolinOS 4.5.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gBRootPath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third part...
CVE-2006-4851
CVE-2006-4851 describes a PHP remote file inclusion in BolinOS 4.5.5 and earlier, in file system/_b/contentFiles/gBHTMLEditor.php, exploitable via a URL in the gBRootPath parameter. The vulnerability allows an attacker to execute arbitrary PHP code on the affected system. Root cause: improper han...
