CVE-2012-4875

Ghostscript 9.04 is affected by a heap-based buffer overflow in gdevwpr2.c when processing the OutputFile device parameter, enabling user-assisted remote attackers to execute arbitrary code via a long file name in a PostScript document. The issue is documented as a potential vulnerability with th...

CVE-2011-4875

CVE-2011-4875 corresponds to a stack-based buffer overflow in the HmiLoad runtime loader of Siemens WinCC flexible (versions 2004, 2005, 2007, 2008) and WinCC V11 (TIA Portal) including SIMATIC HMI panels and WinCC V11 Runtime Advanced. The root cause is improper handling/validation of Unicode st...

KLA10394 Multiple vulnerabilities in Siemens

Multiple critical vulnerabilities have been found in Siemens products. Malicious users can exploit these vulnerabilities to read & modify arbitrary files, cause denial of service, execute arbitrary code, bypass authentication, obtain access and inject arbitrary HTTP headers. Below is a complete...

CVE-2010-4875

The CVE-2010-4875 issue affects the Vodpod Video Gallery Plugin for WordPress, specifically version 3.1.5, where a Cross-site Scripting (XSS) vulnerability exists in vodpod_gallery_thumbs.php. The root cause is improper sanitization of the gid parameter, allowing remote attackers to inject arbitr...

CVE-2010-4875

creationtimestamp| type| source ---|---|--- 2010-11-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34976...

CVE-2009-4875

CVE-2009-4875 affects FCKeditor.Java 2.4. The vulnerability enables remote denial of service by sending a malformed request parameter containing control characters, which can trigger an infinite loop in the Java-based connector. The issue is described across multiple sources (NVD/NASL/Nessus refe...

CVE-2008-4875

Philips Electronics VOIP841 DECT Phone web server (firmware 1.0.4.50 and 1.0.4.80) is subject to a directory traversal vulnerability via a .. in GET requests, allowing remote authenticated users to read arbitrary files. The issue is documented as CVE-2008-4875. It is noted that this can be levera...

CVE-2005-4875

TYPO3

SuSE 10 Security Update : xorg-x11-Xnest (ZYPP Patch Number 4875)

This update fixes various Xserver security issues. File existence disclosure vulnerability. CVE-2007-5958 XInput Extension Memory Corruption Vulnerability IDEF2888 CVE-2007-6427. TOG-CUP Extension Memory Corruption Vulnerability IDEF2901 CVE-2007-6428. EVI Extension Integer Overflow Vulnerability...

Unrestricted file upload

Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload arbitrary files by modifying the HTTP request to send an image content type, and to omit isguest and isuser parameters. NOTE: this issue might be related to CVE-2006-4875...

CVE-2006-4875

CVE-2006-4875 refers to an Unrestricted file upload vulnerability in Jupiter CMS, specifically in the module galleryuploadfunction.php, enabling remote attackers to upload picture files (and possibly files with arbitrary extensions) to the path gallery/albums/public. The NVD entry documents this ...