59 matches found
CVE-2012-4896
CVE-2012-4896: SumatraPDF before 2.1 is affected by a heap-based buffer overflow in its PDF handling, allowing remote attackers to execute arbitrary code via a crafted PDF document. The vulnerability is specific to the SumatraPDF parser and is described as a separate issue from CVE-2012-4895. The...
CVE-2012-4896
Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4895...
Vulnerabilities in SumatraPDF Reader Could Allow Arbitrary Code Execution
Executive Summary Microsoft is providing notification of the discovery and remediation of multiple vulnerabilities affecting SumatraPDF Reader software version 2.0.1 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor...
CVE-2011-4896
Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port...
CVE-2011-4896
Technical details (affected products, versions, root cause, fixes) are not provided in the connected documents. The CVE description remains the only published detail. Monitor for official updates.
CVE-2011-4896
Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port...
Expinion.Net Member Management System 'REF_URL' Parameter Cross-Site Scripting Vulnerability
The host is running Member Management System and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbmembermanagementsystemxssvuln.nasl 5750 2017-03-28 14:10:17Z cfi $ Expinion.Net Member Management System 'REFURL' Parameter Cross-Site Scripting Vulnerability Authors...
CVE-2010-4896
CVE-2010-4896 is a documented cross-site scripting (XSS) vulnerability in the Admin/index.asp page of Expinion.Net Member Management System 4.0 . The issue arises from the REF_URL parameter , enabling remote attackers to inject arbitrary web script or HTML. Multiple security feeds (OpenVAS entrie...
CVE-2009-4896
CVE-2009-4896 affects the mlmmj project’s web interface mlmmj-php-admin, specifically versions 1.2.15 through 1.2.17. The vulnerability is a directory-traversal flaw allowing remote authenticated users to overwrite, create, or delete arbitrary files, or reveal existence of arbitrary directories, ...
[SECURITY] [DSA 2073-1] New mlmmj packages fix directory traversal
------------------------------------------------------------------------ Debian Security Advisory DSA-2073-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 20, 2010 http://www.debian.org/security/faq -...
CVE-2008-4896
Cross-site scripting XSS vulnerability in fichiers/addurl.php in Logz CMS 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the art parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-4896
CVE-2008-4896 is a Cross-site Scripting (XSS) vulnerability in Logz CMS 1.3.1, exposed through fichiers/add_url.php. The issue allows remote attackers to inject arbitrary web script or HTML by supplying the art parameter. Vulnerable component: add_url.php; affected product/version: Logz CMS 1.3.1...
CVE-2008-4896
creationtimestamp| type| source ---|---|--- 2008-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6896...
CVE-2007-4896
Multiple cross-site scripting XSS vulnerabilities in admin/header.php in Toms Gaestebuch 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 langadminseite, 2 langueberschrift, or 3 einstmetachar parameter, different vectors than CVE-2007-4711...
CVE-2007-4896
CVE-2007-4896 describes multiple XSS vulnerabilities in Toms Gaestebuch
CVE-2006-4896
This CVE-2006-4896 entry is rejected and should not be used as an active vulnerability reference.
