F5 Networks BIG-IP : Multiple Wireshark vulnerabilities (K15868)

CVE-2013-4074 The dissectcapwapdata function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a denial of service application...

CVE-2012-4920

CVE-2012-4920 affects the WordPress Zingiri Forum plugin (Zingiri Forum) prior to 1.4.4. The vulnerability is in the forum.php function zing_forum_output, allowing a crafted url parameter to trigger a directory traversal via .. in index.php, enabling remote attackers to read arbitrary files. Impa...

Fedora Update for wireshark FEDORA-2013-17661

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2013-17661 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for wireshark FEDORA-2013-16362

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : wireshark-1.10.1-1.fc19 (2013-16362)

Ver. 1.10.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2013-4920

CVE-2013-4920 concerns the P1 dissector in Wireshark 1.10.x before 1.10.1. The vulnerability arises because a global variable is not properly initialized, allowing remote attackers to cause a denial of service (application crash) via a crafted packet. The impact, as described in the sources, is t...

CVE-2011-4920

CVE-2011-4920 describes multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.26 and other versions before 1.0.0. The issues allow remote attackers to inject arbitrary web script or HTML via specific URLs/components: (1) e107_images/thumb.php, (2) rate.php, (3) the resend_name parameter...

CVE-2010-4920

CVE-2010-4920: SQL injection in Micronetsoft Rental Property Management Website 1.0 (detail.asp) via the ad_ID parameter allows remote attackers to execute arbitrary SQL commands. Root cause: unsanitized ad_ID input enabling injection. Impact (per CVSS2): partial confidentiality, integrity, and a...

CVE-2010-4920

creationtimestamp| type| source ---|---|--- 2010-09-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14919...

CVE-2009-4920

Cisco ASA 5580 series devices running software 8.1(2) are affected by CVE-2009-4920. The vulnerability (unspecified in the sources) allows remote attackers to cause a denial of service (watchdog traceback) by sending a large amount of small-packet data. Impact is noted as a complete availability ...

CVE-2008-4920

CVE-2008-4920 is rejected/not used as a vulnerability entry.

CVE-2008-4920

...

Sql injection

SQL injection vulnerability in soportehorizontalw.php in PHP Webquest 2.6 allows remote attackers to execute arbitrary SQL commands via the idactividad parameter, a different vector than CVE-2007-4920...

CVE-2007-4920

The CVE-2007-4920 entry concerns a SQL injection vulnerability in soporte_derecha_w.php for PHP Webquest 2.5 and earlier. The vulnerability is triggered via the id_actividad parameter, enabling remote attackers to execute arbitrary SQL commands. This affects the specified PHP file/version family ...

CVE-2006-4920

CVE-2006-4920 : Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to (1) starnet/modules/sn_allbum/slideshow.php and (2) starnet/themes/editable/main.inc.php.

MS:1D6808A9-6D69-4920-8779-9D2D23E993A3

...