80 matches found
CVE-2014-4870
CVE-2014-4870 affects Brocade Vyatta 5400 vRouter versions 6.4R(x), 6.6R(x), and 6.7R1. The issue arises from improper input validation in /opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl, enabling a non-root user to leverage the sudo configuration to gain root privileges. Connected sources ...
CVE-2013-4870
SQL injection vulnerability in the News Search newssearch extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-4870
CVE-2013-4870 refers to a SQL injection vulnerability in the TYPO3 News Search (news_search) extension version 0.1.0. Multiple connected sources confirm that remote attackers can trigger arbitrary SQL commands via unspecified vectors, enabling partial confidentiality, integrity, and availability ...
CVE-2012-4870
This CVE concerns FreePBX 2.9 and earlier, where multiple cross-site scripting (XSS) vulnerabilities exist in the web UI. The affected components/entry points include: (1) panel/index_amp.php via the context parameter; (2) panel/dhtml/index.php; (3) panel/flash/mypage.php via clid or clidname; (4...
CVE-2011-4870
CVE-2011-4870 covers multiple buffer overflows in Invensys Wonderware InBatch, specifically the GUIControls, BatchObjSrv, and BatchSecCtrl ActiveX controls. Affected versions include InBatch 8.1 SP1, 9.0, 9.0 SP1, 9.0 SP2, and 9.5 Server/Runtime Clients; the root cause is improper handling of lon...
CVE-2010-4870
BloofoxCMS 0.3.5 is vulnerable to an SQL injection in index.php via the gender parameter, allowing remote attackers to execute arbitrary SQL commands. This CVE (CVE-2010-4870) is backed by multiple sources (NVD entry and OpenVAS/PRION listings) that confirm the flaw and impact (high severity, CVS...
SuSE 11.1 Security Update : libvirt (SAT Patch Number 4870)
The following bug was fixed in libvirt : - libvirtd could crash if bogus parameters where passed to the VirDomainGetVcpus call. CVE-2011-2511 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...
Fedora Update for libvirt FEDORA-2011-4870
Check for the Version of libvirt OpenVAS Vulnerability Test Fedora Update for libvirt FEDORA-2011-4870 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CVE-2010-4870
creationtimestamp| type| source ---|---|--- 2010-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15328...
CVE-2009-4870
CVE-2009-4870 affects PHPCityPortal's login.php; SQL injection via the req_username and req_password parameters allows remote execution of arbitrary SQL commands. Underlying issue is improper input handling in the login logic. CVSS indicates a HIGH impact with partial confidentiality, integrity, ...
CVE-2009-4870
creationtimestamp| type| source ---|---|--- 2009-08-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9395...
Fedora Core 9 FEDORA-2009-4870 (squirrelmail)
The remote host is missing an update to squirrelmail announced via advisory FEDORA-2009-4870. OpenVAS Vulnerability Test $Id: fcore20094870.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-4870 squirrelmail Authors: Thomas Reinke Copyright: Copyright...
dovecot security and bug fix update
1.0.7-7 - permissions of deliver and dovecot.conf from 1.0.7-5 reverted - password can be stored in different file readable only for root now - Resolves: 436287, CVE-2008-4870 1.0.7-6 - added missing directory in file list - Resolves: 436287 1.0.7-5 - change permissions of deliver and dovecot.con...
Gentoo Security Advisory GLSA 200812-16 (dovecot)
The remote host is missing updates announced in advisory GLSA 200812-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-4870
dovecot 1.0.7 in Red Hat Enterprise Linux RHEL 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the sslkeypassword parameter value...
CVE-2008-4870
CVE-2008-4870 is confirmed in Dovecot 1.0.7 on Red Hat Enterprise Linux 5 (and possibly Fedora). The issue arises from world-readable dovecot.conf permissions, allowing local users to read the ssl_key_password. Affected advisories include MiracleLinux AXSA-2009-18:01 and Oracle Linux ELSA-2009-02...
CVE-2008-4870
dovecot 1.0.7 in Red Hat Enterprise Linux RHEL 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the sslkeypassword parameter value...
CVE-2005-4870
CVE-2005-4870 describes stack-based buffer overflows in IBM DB2 8.1 affecting four XML-related functions (xmlvarcharfromfile, xmlclobfromfile, xmlfilefromvarchar, xmlfilefromclob). The overflow is triggered by a 94-byte second argument, leading to overwriting the return address to a pointer withi...
CVE-2006-4870
CVE-2006-4870 describes multiple PHP remote file inclusion vulnerabilities in AEDating 4.1 (and possibly earlier). A remote attacker can execute arbitrary PHP code by supplying a URL in the dir[inc] parameter targeting inc/design.inc.php or inc/admin_design.inc.php. The vulnerability’s impact is ...
