99 matches found
CVE-2018-4854
The CVE-2018-4854 issue affects Siemens SICLOCK TC100/TC400 (all versions). A network-accessible UDP port 69/service allows an attacker to modify the device’s administrative client stored on the unit; if a legitimate user runs the modified client, the attacker could achieve code execution on the ...
CVE-2016-4854
Cross-site request forgery CSRF vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors...
CVE-2016-4854
CVE-2016-4854 is a Cross-Site Request Forgery vulnerability in LG Electronics L-04D wireless router firmware versions V10a/V10b. The flaw allows remote attackers to hijack the administrator’s authentication and perform arbitrary operations via unspecified vectors. Affected products: L-04D firmwar...
CVE-2016-4854
Cross-site request forgery CSRF vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors...
CVE-2008-4854
CVE-2008-4854 is rejected/not used; this ID does not represent an active vulnerability entry.
ucl.ac.uk XSS vulnerability
Vulnerable URL: http://www.ucl.ac.uk/ldlr/LOVDv.1.1.0/index.php?selectdb=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4854 VIP website status:| Yes Check ucl.ac.uk SSL...
Oracle: Security Advisory (ELSA-2013-1115)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2013-1114)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle E-Business Suite - Cross-site Scripting vulnerability
Application: E-Business Suite Vendor URL: Oracle Bugs: Cross-site Scripting Reported: 17.07.2015 Vendor response: 24.07.2015 Date of Public Advisory:20.10.2015 Reference: Oracle CPU Oct 2015 Authors: Nikita Kelesis, Ivan Chalykin, Alexey Tyurin ERPScan VULNERABILITY INFORMATION Class: Cross-site...
OracleVM 3.3 : bind (OVMSA-2014-0084)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2014-8500 1171973 - Use /dev/urandom when generating rndc.key file 951255 - Remove bogus file from /usr/share/doc, introduced by fix for bug 1092035 - Add support for TLSA resource records...
RHEL 6 : rhev-hypervisor6 (RHSA-2013:1181)
An updated rhev-hypervisor6 package that fixes three security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
F5 Networks BIG-IP : BIND vulnerability (SOL14613)
The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial-of-service DoS through a query with a malformed RDATA section that ...
Oracle Linux 5 : bind97 (ELSA-2014-1244)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1244 advisory. - Fix CVE-2014-0591 - fix for CVE-2013-4854 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
bind97 security and bug fix update
32:9.7.0-21.P2 - Fix CVE-2014-0591 32:9.7.0-20.P2 - Fix init script to not unmount filesystem when ROOTDIR is empty 1059118 32:9.7.0-19.P2 - fix for CVE-2013-4854 32:9.7.0-18.P2 - fix CVE-2013-2266...
CVE-2014-4854
The CVE-2014-4854 entry concerns the WP Construction Mode WordPress plugin version 1.8. Affected component: the under-construction feature using the wuc_logo parameter in a save action to wp-admin/admin.php. Root cause: reflected XSS vulnerability in the handling of wuc_logo, allowing remote atta...
openSUSE Security Update : bind (openSUSE-SU-2013:1353-1)
The BIND nameserver was updated to 9.9.3P2 to fix a security issue where incorrect bounds checking on private type 'keydata' could lead to a remotely triggerable REQUIRE failure. CVE-2013-4854, bnc831899 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...
RedHat Update for bind RHSA-2013:1114-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 6 : bind (ELSA-2014-0043)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0043 advisory. - Fix CVE-2014-0591 - fix CVE-2013-4854 - fix CVE-2013-2266 - fix CVE-2012-5689 Tenable has extracted the preceding description block directly from the Oracle...