44 matches found
CVE-2017-4857
CVE-2017-4857 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2016-4857
CVE-2016-4857 is an open-redirect vulnerability in Splunk products: Splunk Enterprise 6.4.x prior to 6.4.2, 6.3.x prior to 6.3.6, 6.2.x prior to 6.2.11, and Splunk Light prior to 6.4.2. The vulnerability would allow redirecting users to arbitrary websites via crafted URLs, enabling phishing risks...
CVE-2008-4857
CVE-2008-4857 entry is rejected/not used; not associated with any vulnerability.
CVE-2015-4857
Unspecified vulnerability in the RDBMS component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...
CVE-2015-4857
CVE-2015-4857 affects Oracle Database Server 12.1.0.1 and 12.1.0.2 (RDBMS component). The vulnerability is described as unspecified with remote authenticated access that could impact confidentiality and integrity via unknown vectors. Documented exposure is supported by multiple sources (NVD entry...
CVE-2014-4857
Cross-site scripting XSS vulnerability in Gurock TestRail before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Created By field in a project activity...
CVE-2014-4857
Gurock TestRail prior to 3.1.3 is affected by a cross-site scripting (XSS) vulnerability due to improper sanitization of the Created By field in project activities. The flaw enables script or HTML injection in the browser context of authenticated users, with evidence from multiple sources noting ...
TestRail cross-site scripting vulnerability
Overview TestRail version 3.1.1.3130 contains a cross-site scripting vulnerability. Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' Gurock Software TestRail version 3.1.1.3130 contains a stored cross-site scripting vulnerability. The Created ...
CVE-2012-4857
CVE-2012-4857 affects IBM Informix Server: 11.50 up to 11.50.xC9W2 and 11.70 up to 11.70.xC7. A buffer overflow in the handling of unspecified SQL statements allows an authenticated user who can connect to the Informix database server (locally or remotely) to crash the server or execute arbitrary...
Winamp 5.x 多个整数溢出漏洞
BUGTRAQ ID: 51015 CVE ID: CVE-2011-3834,CVE-2011-4857 Winamp是流行的通用音乐播放器。 Winamp在实现上存在多个整数溢出漏洞，攻击者可利用这些漏洞执行任意代码。 1）当使用流标头分配内存时，inavi.dll插件中的整数溢出错误可通过特制的AVI文件导致堆缓冲区溢出。 2）在使用RIFF INFO块尺寸值分配内存时，inavi.dll插件中的整数溢出错误可通过特制的AVI文件导致堆缓冲区溢出。 0 Nullsoft Winamp 5.x 厂商补丁： Nullsoft --------...
Winamp AVI And IT Files Parsing Buffer Overflow Vulnerabilities
Winamp is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-4857
Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...
CVE-2011-4857
Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...
CVE-2011-4857
CVE-2011-4857 describes a heap-based buffer overflow in Winamp’s in_mod.dll plugin (pre-5.623) triggered by crafted Impulse Tracker (IT) file data, enabling remote code execution. The issue is tied to parsing/handling in IT data and relates to the in_mod.dll component used by Winamp 5.x. Public d...
CVE-2010-4857
CVE-2010-4857 affects CAG CMS 0.2 Beta; the weakness is a SQL injection in click.php triggered via the itemid parameter. The vulnerability allows remote attackers to send crafted input to execute arbitrary SQL commands against the underlying database. The issue is documented across multiple sourc...
CVE-2009-4857
Cross-site scripting XSS vulnerability in login.php in PHP Photo Vote 1.3F allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2009-4857
CVE-2009-4857 is an XSS vulnerability in PHP Photo Vote 1.3F, exploitable via the login.php page parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. The provided sources describe the affected component and the input parameter but do not include explicit ex...