CVE-2012-4868

SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter...

Fedora Update for dhcp FEDORA-2012-0490

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreeBSD Ports: isc-dhcp42-server

The remote host is missing an update to the system as announced in the referenced advisory. VID 1800886c-3dde-11e1-89b4-001ec9578670 OpenVAS Vulnerability Test $ Description: Auto generated from VID 1800886c-3dde-11e1-89b4-001ec9578670 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Fedora 16 : dhcp-4.2.3-5.P2.fc16 (2012-0490)

CVE-2011-4868: error in DDNS processing of DHCPv6 leases can cause ISC dhcpd crash Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

FreeBSD : isc-dhcp-server -- DoS in DHCPv6 (1800886c-3dde-11e1-89b4-001ec9578670)

ISC reports : Due to improper handling of a DHCPv6 lease structure, ISC DHCP servers that are serving IPv6 address pools AND using Dynamic DNS can encounter a segmentation fault error while updating lease status under certain conditions. The potential exists for this condition to be intentionally...

CVE-2011-4868

The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS DDNS and issuing IPv6 addresses, does not properly handle the DHCPv6 lease structure, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted packets...

CVE-2011-4868

ISC DHCP (dhcpd) before 4.2.3-P2 is affected when using Dynamic DNS with IPv6. The issue lies in the logging/DDNS handling of the DHCPv6 lease structure during lease-status updates, which can trigger a NULL pointer dereference and crash the daemon (denial of service). Exploitation details are not...

CVE-2010-4868

CVE-2010-4868 affects W-Agora (4.2.1 and earlier), with a cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) exploitable via the bn parameter. OpenVAS notes also a local file-inclusion path, both arising from improper input sanitization. Impact described as arbitrary script/...

CVE-2010-4868

creationtimestamp| type| source ---|---|--- 2010-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34906...

CVE-2006-4868

creationtimestamp| type| source ---|---|--- 2010-07-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16597 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms06055vmlmethod.rb 2025-02-06 03:13:38+00:00|...

CVE-2009-4868

CVE-2009-4868 describes a cross-site scripting (XSS) vulnerability in Hitron Soft Answer Me 1.0. The issue allows remote attackers to inject arbitrary web script or HTML via the q_id parameter to the answers script (aka answers.php). The defect’s impact, as stated, is that an attacker can execute...

CVE-2009-4868

creationtimestamp| type| source ---|---|--- 2009-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34501...

Gentoo Security Advisory GLSA 200903-33 (ffmpeg gst-plugins-ffmpeg mplayer)

The remote host is missing updates announced in advisory GLSA 200903-33. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 200903-33 (ffmpeg gst-plugins-ffmpeg mplayer)

The remote host is missing updates announced in advisory GLSA 200903-33. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-4868

CVE-2008-4868 concerns an unspecified vulnerability in the function avcodec_close() within libavcodec/utils.c of FFmpeg 0.4.9 before r14787 , used by MPlayer . The connected sources consistently describe the issue as having an unknown impact and attack vectors; no concrete exploit details are pro...

Internet Explorer VML Rect Fill Method Buffer Overflow (MS06-055; CVE-2006-4868)

Microsoft Internet Explorer is the most widely used Internet browser. Microsoft Internet Explorer fails to handle Vector Markup Language VML tags. VML is a set of XML tags for drawing vector graphics. A remote attacker may trigger this vulnerability to execute arbitrary code on the target system...

MS06-055 Microsoft Internet Explorer VML Fill Method Code Execution

This module exploits a code execution vulnerability in Microsoft Internet Explorer using a buffer overflow in the VML processing code VGX.dll. This module has been tested on Windows 2000 SP4, Windows XP SP0, and Windows XP SP2. This module requires Metasploit: https://metasploit.com/download...

Internet Explorer VML rect fill buffer overflow

Added: 09/20/2006 CVE: CVE-2006-4868 BID: 20096 OSVDB: 28946 Background Vector Markup Language VML is an XML-based format for vector graphics. Problem A buffer overflow in Internet Explorer when processing VML code allows remote command execution using a long fill parameter within a rect tag...

Internet Explorer VML rect fill buffer overflow

Added: 09/20/2006 CVE: CVE-2006-4868 BID: 20096 OSVDB: 28946 Background Vector Markup Language VML is an XML-based format for vector graphics. Problem A buffer overflow in Internet Explorer when processing VML code allows remote command execution using a long fill parameter within a rect tag...

CVE-2006-4868

Stack-based buffer overflow in the Vector Graphics Rendering engine vgx.dll, as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language VML file with a long fill parameter...