CVE-2015-4900

CVE-2015-4900 is an Oracle Database Server issue affecting the XDB - XML Database component in versions 11.2.0.4, 12.1.0.1, and 12.1.0.2. The vulnerability is described as unspecified, allowing remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors. ...

CVE-2015-4900

Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2014-4900

The CVE-2014-4900 entry concerns the migme (com.projectgoth) Android app version 4.03.002 that fails to verify X.509 certificates from SSL servers. This lack of certificate validation allows man-in-the-middle attackers to spoof the TLS server and obtain sensitive information via a crafted certifi...

openSUSE Security Update : libsndfile (openSUSE-SU-2011:0855-1)

An integer overflow in libsndfile while processing certain PAF files has been fixed. CVE-2011-2696 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2013-4900

Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote attackers to read arbitrary files via a ..%5c dot dot encoded backslash in a GET request...

CVE-2013-4900

Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote attackers to read arbitrary files via a ..%5c dot dot encoded backslash in a GET request...

CVE-2013-4900

CVE-2013-4900 describes a directory traversal in DeWeS Web Server (0.4.2 and possibly earlier), used with Twilight CMS, allowing remote attackers to read arbitrary files via a dot-dot-encoded backslash (e.g., ..%5c) in a GET request. Connected sources confirm the vulnerable component and the expl...

DeWeS 0.4.2 - Directory Traversal

DeWeS 0.4.2 - Directory Traversal Advisory ID: HTB23167 Product: DeWeS web server Twilight CMS Vendor: Strata Technologies LLC Vulnerable Versions: 0.4.2 and probably prior Tested Version: 0.4.2 Vendor Notification: July 24, 2013 Public Disclosure: August 21, 2013 Vulnerability Type: Path Travers...

DeWeS 0.4.2 - Directory Traversal

Advisory ID: HTB23167 Product: DeWeS web server Twilight CMS Vendor: Strata Technologies LLC Vulnerable Versions: 0.4.2 and probably prior Tested Version: 0.4.2 Vendor Notification: July 24, 2013 Public Disclosure: August 21, 2013 Vulnerability Type: Path Traversal CWE-22 CVE Reference:...

DeWeS 0.4.2 - Directory Traversal Vulnerability

Exploit for windows platform in category web applications High-Tech Bridge Security Research Lab discovered path traversal vulnerability in DeWeS web server that is supplied in package with Twilight CMS Windows version, which can be exploited to read arbitrary files on vulnerable system. 1 Path...

DeWeS 0.4.2 Path Traversal

Advisory ID: HTB23167 Product: DeWeS web server Twilight CMS Vendor: Strata Technologies LLC Vulnerable Versions: 0.4.2 and probably prior Tested Version: 0.4.2 Vendor Notification: July 24, 2013 Public Disclosure: August 21, 2013 Vulnerability Type: Path Traversal CWE-22 CVE Reference:...

CVE-2013-4900

creationtimestamp| type| source ---|---|--- 2013-08-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38737...

Untrusted Pointer Dereference Vulnerability in Corel WordPerfect X6

Advisory ID: HTB23114 Product: Corel WordPerfect X6 Standard Edition Vendor: Corel Corporation Vulnerable Versions: 16.0.0.388, other versions may be also affected Tested Version: 16.0.0.388 on Windows 7 SP1 32 bits Vendor Notification: September 12, 2012 Public Disclosure: March 7, 2013...

Corel WordPerfect X6 Standard Edition Untrusted Pointer Dereference

Advisory ID: HTB23114 Product: Corel WordPerfect X6 Standard Edition Vendor: Corel Corporation Vulnerable Versions: 16.0.0.388, other versions may be also affected Tested Version: 16.0.0.388 on Windows 7 SP1 32 bits Vendor Notification: September 12, 2012 Public Disclosure: March 7, 2013...

CVE-2010-4900

CVE-2010-4900 is an open redirect vulnerability in CMS WebManager-Pro prior to or including version 8.1, exploitable via a URL supplied in the url parameter of c.php. The underlying issue allows remote attackers to redirect users to arbitrary sites, enabling phishing-style redirection. The connec...

Scientific Atlanta DPX2100 Comcast-supplied Default Password (deprecated)

Binary data 4900.prm...

CVE-2008-4900

creationtimestamp| type| source ---|---|--- 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6936 2008-11-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6944...

Eserv 3.x FTP Server (ABOR) Remote Stack Overflow PoC

Summary Eserv/3.x - Mail, News, Web and Proxy Servers - Mail Server SMTP, IMAP4 and POP3 - News Server NNTP - Web Server HTTP - FTP Server - Proxy Servers HTTP, FTP, Socks, etc - Finger Server - Built-in scheduler and dialer. Description Stack-based buffer overflow in the FTP server in Etype Eser...

openSUSE 10 Security Update : python (python-4900)

Specially crafted images could trigger an integer overflow in the imageop module CVE-2007-4965. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update python-4900. The text description of this plugin...

CVE-2007-4900

CVE-2007-4900 describes a cross-site scripting (XSS) flaw in the logon page of RSA EnVision 3.3.6 Build 0115. The issue allows an attacker to inject arbitrary script/HTML via the username field, potentially enabling user-side script execution in a victim’s browser. The connected records confirm t...