55 matches found
CVE-2019-4866
CVE-2019-4866 entry is rejected and not used; it does not represent an active vulnerability.
CVE-2017-4866
CVE-2017-4866 is rejected/not used and does not represent an active vulnerability entry.
Oracle MySQL Multiple Unspecified Vulnerabilities-02 (Oct 2015) - Linux
Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...
CVE-2016-4866
The CVE-2016-4866 issue affects Cybozu Office 9.0.0 to 10.4.0. It is a cross-site scripting vulnerability in the "Project" function that allows an attacker with administrator rights to inject arbitrary web script or HTML into the affected interface. Related sources (NVD/JVN) confirm the vulnerabl...
JVN#06726266: Cybozu Office multiple cross-site scripting vulnerabilities
Cybozu Office contains multiple cross-site scripting vulnerabilities below. Cross-site scripting in the "Customapp" function - CVE-2016-4865 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N| Base Score: 4.8 CVSS v2| AV:N/AC:L/Au:S/C:N/I:P/A:N| Base Score:...
Amazon Linux: Security Advisory (ALAS-2016-684)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for community-mysql FEDORA-2016-65
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : mysql (openSUSE-2015-889) (BACKRONYM)
MySQL was updated to 5.6.27 to fix security issues and bugs. The following vulnerabilities were fixed as part of the upstream release boo951391: CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789, CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800, CVE-2015-4802, CVE-2015-4815,...
CVE-2015-4866
CVE-2015-4866 is an unspecified vulnerability in Oracle MySQL Server up to 5.6.23 (and earlier) affecting availability via the InnoDB component. The connected documents consistently describe unknown vectors and remote authenticated access; no concrete exploit details or fixed version are provided...
CVE-2015-4866: Undefined Security Weakness
Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB...
CVE-2013-4866
CVE-2013-4866 affects the LIXIL My SATIS Genius Toilet Android app and its Bluetooth interface. The Android app contains a hard-coded Bluetooth PIN (noted in public advisories as 0000), enabling physically proximate attackers to use the app to control the toilet and trigger resource consumption (...
CVE-2012-4866
CVE-2012-4866 describes an untrusted search path vulnerability in Xtreme RAT 3.5 that enables local users to execute arbitrary code via a Trojan horse dwmapi.dll located in the current working directory, i.e., a DLL hijacking scenario. The connected documents corroborate this, listing the same de...
开心网(Kaixin001)手机客户端 for Android 信息泄露漏洞
CVE-2011-4866 Android是Google通过Open Handset Alliance发起的项目，用于为移动设备提供完整的软件集，包括操作系统、中间件等。 Android的Kaixin001 com.kaixin001.activity应用程序1.3.1版本和1.3.3版本中存在漏洞，该漏洞源于未正确保护数据。远程攻击者可利用此漏洞借助特制的应用程序读取或修改联系人信息和明码文本密码。 0 1.3.1 1.3.3 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...
CVE-2011-4866
The CVE-2011-4866 entry concerns the Kaixin001 Android app (com.kaixin001.activity) versions 1.3.1 and 1.3.3. The root cause is improper data protection, allowing remote attackers to read or modify contacts and a cleartext password via a crafted application. Impact is data exposure and integrity ...
CVE-2010-4866
CVE-2010-4866 describes a SQL injection vulnerability in Chipmunk Board 1.3, specifically in index.php, allowing remote attackers to execute arbitrary SQL commands via the forumID parameter. The reports indicate a remote exploit path with a base score of 7.5 (HIGH) under CVSS v2, but the provided...
CVE-2010-4866
creationtimestamp| type| source ---|---|--- 2010-10-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15175...
CVE-2009-4866
Cross-site scripting XSS vulnerability in search.cgi in Matt's Script Archive MSA Simple Search 1.0 allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-4866
The CVE-2009-4866 entry covers a Cross-site scripting (XSS) vulnerability in Matt's Script Archive (MSA) Simple Search 1.0’s search.cgi, where an attacker can inject arbitrary script or HTML via the terms parameter. The OpenVAS NASL corroborates this by listing Simple Search AS XSS vulnerability....