CVE-2019-4865

...

CVE-2019-4865

CVE-2019-4865 is rejected and not used; this entry does not represent an active vulnerability.

CVE-2017-4865

CVE-2017-4865 is rejected/not used; this candidate number should not be used.

CVE-2017-4865

...

CVE-2016-4865

CVE-2016-4865 affects Cybozu Office 9.0.0–10.4.0. The vulnerability is a cross-site scripting flaw in the "Customapp" function that allows attackers with administrator rights to inject arbitrary web script or HTML, which can execute in the logged-in user’s browser. Impact is arbitrary script exec...

JVN#06726266: Cybozu Office multiple cross-site scripting vulnerabilities

Cybozu Office contains multiple cross-site scripting vulnerabilities below. Cross-site scripting in the "Customapp" function - CVE-2016-4865 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N| Base Score: 4.8 CVSS v2| AV:N/AC:L/Au:S/C:N/I:P/A:N| Base Score:...

CVE-2015-4865

CVE-2015-4865 affects Oracle E-Business Suite 12.1.3, 12.2.3, and 12.2.4, specifically via the Oracle Applications Framework component (BC4J). The vulnerability enables remote authenticated users to affect confidentiality through BC4J-related vectors. Public references describe it as an unspecifi...

CVE-2014-4865

CSRF in CacheGuard OS 5.7.7 affects /gui/password-wadmin.apl allowing an attacker to hijack authenticated sessions. Root cause: missing CSRF validation in that endpoint; impact includes potential privilege/user authentication manipulation with partial confidentiality/ integrity/availability. CVSS...

CacheGuard OS contains a cross-site request forgery vulnerability

Overview CacheGuard OS v5.7.7 does not sufficiently verify whether a valid request was intentionally provided by the user, which results in a cross-site request forgery CSRF vulnerability. Description CWE-352: Cross-Site Request Forgery CSRF CacheGuard OS v5.7.7 does not sufficiently verify wheth...

CVE-2012-4865

CVE-2012-4865 arises from a boundary error in Oreans Themida 2.1.8.0 when processing .TMD files, causing a buffer overflow that can allow remote code execution. The vulnerability is documented across multiple sources (e.g., Red Hat, NVD, CVE lists, and Zero Science Lab), with details indicating t...

腾讯微博 for Android 权限许可和访问控制漏洞

CVE-2011-4865 Android是Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android的Tencent WBlog com.tencent.WBlog3.3.1版本和MicroBlogPad1.4.0版本应用程序中存在漏洞，该漏洞源于未正确保护数据。远程攻击者可利用此漏洞借助特制应用程序读取或修改短消息草稿箱和搜索关键词。 0 WBlog 3.3.1 MicroBlogPad 1.4.0 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...

CVE-2011-4865

The CVE-2011-4865 issue affects Android apps Tencent WBlog 3.3.1 and MicroBlogPad 1.4.0, where data is not protected properly, allowing remote attackers to read or modify message drafts and search keywords via a crafted app. Root cause: insecure data protection within these apps. Impact is data e...

Joomla Multiple Components SQL Injection Vulnerabilities

This host is running Joomla with multiple components and is prone to SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbjoomlamultcomponentssqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Joomla Multiple Components SQL Injection Vulnerabilities Authors: Madhuri D Copyright:...

CVE-2010-4865

CVE-2010-4865 affects Joomla! component com_jeguestbook 1.0 (JE Guestbook). The vulnerability is an SQL injection in the item_detail action to index.php, exploitable via the d_itemid parameter, allowing remote execution of arbitrary SQL commands. According to the OpenVAS entry, a vendor fix is th...

SuSE 10 Security Update : valgrind (ZYPP Patch Number 5803)

valgrind reads a file .valgrindrc in the current directory. Therefore local users could place such a file a world-writable directory such as /tmp and influence other users' valgrind when it's executed there. CVE-2008-4865 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description o...

CVE-2010-4865

creationtimestamp| type| source ---|---|--- 2010-09-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15157...

CVE-2009-4865

CVE-2009-4865 affects the I-Escorts Directory Script and Agency Script, where multiple SQL injection flaws exist in escorts_search.php when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject arbitrary SQL via the 1) search_name and 2) languages parameters. Root caus...

openSUSE Security Update : valgrind (valgrind-321)

valgrind reads a file .valgrindrc in the current directory. Therefore local users could place such a file a world-writable directory such as /tmp and influence other users' valgrind when it's executed there CVE-2008-4865. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

openSUSE 10 Security Update : valgrind (valgrind-5809)

valgrind reads a file .valgrindrc in the current directory. Therefore local users could place such a file a world-writable directory such as /tmp and influence other users' valgrind when it's executed there CVE-2008-4865. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

CVE-2008-4865

Untrusted search path vulnerability in valgrind before 3.4.0 allows local users to execute arbitrary programs via a Trojan horse .valgrindrc file in the current working directory, as demonstrated using a malicious --db-command options. NOTE: the severity of this issue has been disputed, but CVE i...