62 matches found
Oracle MySQL Multiple Unspecified Vulnerabilities-02 (Oct 2015) - Linux
Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...
Apache ActiveMQ 'CVE-2011-4905' Denial of Service Vulnerability - Windows
Apache ActiveMQ is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:activemq";...
CVE-2016-4905
SQL injection vulnerability in the WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows attackers with administrator rights to execute arbitrary SQL commands via unspecified vectors...
CVE-2016-4905
The CVE-2016-4905 issue affects the WordPress plugins WP-OliveCart (versions prior to 3.1.3) and WP-OliveCartPro (prior to 3.1.8). The vulnerability is an SQL injection in unspecified vectors that can allow an attacker with administrator rights to execute arbitrary SQL commands. The available con...
ESXi 6.5 < Build 5224529 Multiple Vulnerabilities (VMSA-2017-0006) (remote check)
The version of the remote VMware ESXi 6.5 host is prior to build 5224529. It is, therefore, affected by multiple vulnerabilities : - A stack memory initialization flaw exists that allows an attacker on the guest to execute arbitrary code on the host. CVE-2017-4903 - An unspecified flaw exists in...
VMSA-2017-0006 : VMware ESXi, Workstation and Fusion updates address critical and moderate security issues
a. ESXi, Workstation, Fusion SVGA memory corruption ESXi, Workstation, Fusion have a heap buffer overflow and uninitialized stack memory usage in SVGA. These issues may allow a guest to execute code on the host. VMware would like to thank ZDI and Team 360 Security from Qihoo for reporting these...
VMware Fusion 8.x < 8.5.6 Multiple Vulnerabilities (VMSA-2017-0006) (macOS)
The version of VMware Fusion installed on the remote macOS or Mac OS X host is 8.x prior to 8.5.6. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists due to improper validation of certain input. An attacker on the guest can exploit this to cause a...
VMware Workstation 12.x < 12.5.5 Multiple Vulnerabilities (VMSA-2017-0006) (Linux)
The version of VMware Workstation installed on the remote Linux host is 12.x prior to 12.5.5. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists due to improper validation of certain input. An attacker on the guest can exploit this to cause a denial...
Fedora Update for community-mysql FEDORA-2016-65
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : mysql (openSUSE-2015-889) (BACKRONYM)
MySQL was updated to 5.6.27 to fix security issues and bugs. The following vulnerabilities were fixed as part of the upstream release boo951391: CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789, CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800, CVE-2015-4802, CVE-2015-4815,...
CVE-2015-4905
Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via vectors related to Server : DML...
CVE-2015-4905
CVE-2015-4905 affects Oracle MySQL Server 5.6.23 and earlier. It is described as an unspecified vulnerability in the Server: DML component that could allow a remote authenticated user to impact availability. The connected documents provide no exploit details. Remediation in the public advisories ...
CVE-2012-4905
Cross-site scripting XSS vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object, aka "Universal XSS UXSS."...
CVE-2012-4905
The CVE-2012-4905 entry describes a UXSS (Universal XSS) flaw in Chrome for Android prior to 18.0.1025308. By sending a crafted Intent with javascript: URIs and by inserting Extra data (com.android.browser.application_id => com.android.chrome) into an Intent, an attacker could execute arbitrar...
CVE-2012-4905
creationtimestamp| type| source ---|---|--- 2012-09-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37792...
CVE-2011-4905
CVE-2011-4905 : Apache ActiveMQ is vulnerable to denial of service via the failover path. Specifically, ActiveMQ versions before 5.6.0 can exhaust file descriptors and trigger broker crashes or hangs when remote attackers send many openwire failover:tcp:// connection requests. Remediation in the ...
CVE-2010-4905
CVE-2010-4905 : The vulnerability is a SQL injection in the Softbiz Article Directory Script, specifically in the file/article_details.php, exploitable via the sbiz_id parameter. The issue allows remote attackers to execute arbitrary SQL commands and is rated HIGH (CVSS v2 base score 7.5). Affect...
CVE-2010-4905
SQL injection vulnerability in articledetails.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbizid parameter...
CVE-2010-4905
creationtimestamp| type| source ---|---|--- 2010-09-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14910...
CVE-2009-4905
CVE-2009-4905 relates to multiple cross-site request forgery (CSRF) vulnerabilities in index.php of Acc Statistics 1.1. The weaknesses allow remote attackers to hijack administrator authentication to perform changes such as (1) passwords, (2) usernames, and (3) e-mail addresses. The available con...