55 matches found
CVE-2011-4925
TORQUE Resource Manager (Terascale Open-Source Resource and Queue Manager) =sys-cluster/torque-2.5.13 or >=sys-cluster/torque-4.1.7). The connected documents do not provide exploit code or in-the-wild details. If pursuing mitigation, apply vendor/security advisory guidance to upgrade to the sp...
CVE-2010-4925
CVE-2010-4925 affects Nuked-Klan’s Partenaires module 1.5, where SQL injection is triggered in clic.php via the id parameter. The root cause is unsafely concatenated SQL, allowing remote attackers to execute arbitrary SQL commands. Documented impact includes potential data exposure/ modification ...
SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure
The version of SunSSH running on the remote host has an information disclosure vulnerability. A design flaw in the SSH specification could allow a man-in-the-middle attacker to recover up to 32 bits of plaintext from an SSH-protected connection in the standard configuration. An attacker could...
CVE-2010-4925
creationtimestamp| type| source ---|---|--- 2010-08-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14556...
CVE-2009-4925
Multiple SQL injection vulnerabilities in Portale e-commerce Creasito aka creasito e-commerce content manager 1.3.16, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 admin/checkuser.php and 2 checkuser.php...
SLES9: Security update for OpenSSH
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: openssh openssh-askpass For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 501950...
CVE-2009-4925
creationtimestamp| type| source ---|---|--- 2009-04-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8497...
CVE-2008-4925
CVE-2008-4925 affects MW6 Technologies DataMatrix ActiveX control (DATAMATRIXLib.MW6DataMatrix, DataMatrix.dll) version 3.0.0.1. The flaw arises in the SaveAsBMP and SaveAsWMF methods, allowing a remote attacker to overwrite arbitrary files by supplying a full pathname. Impact per the entry is co...
CVE-2008-4925
creationtimestamp| type| source ---|---|--- 2008-10-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6872...
SuSE 10 Security Update : OpenSSH (ZYPP Patch Number 2184)
Several security problems were fixed in OpenSSH : - A denial of service problem has been fixed in OpenSSH which could be used to cause lots of CPU consumption on a remote openssh server. CVE-2006-4924 - If a remote attacker is able to inject network traffic this could be used to cause a client...
openSUSE 10 Security Update : openssh (openssh-2183)
Several security problems were fixed in OpenSSH : - CVE-2006-4924: A denial of service problem has been fixed in OpenSSH which could be used to cause lots of CPU consumption on a remote openssh server. - CVE-2006-4925: If a remote attacker is able to inject network traffic this could be used to...
CVE-2007-4925
The CVE-2007-4925 vulnerability affects eWire Payment Client (ePC) versions 1.60 and 1.70, where the ewirePC_Decrypt function in ewirepcfunctions.php permits remote command execution through shell metacharacters in the paymentinfo parameter sent to simplePHPLinux/3payment_receive.php. Impact is d...
CVE-2006-4925
packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service crash by sending an invalid protocol sequence with USERAUTHSUCCESS before NEWKEYS, which causes newkeysmode to be NULL...
CVE-2006-4925
CVE-2006-4925 affects OpenSSH: packet.c vulnerability allows a remote attacker to crash the SSH server by sending an invalid USERAUTH_SUCCESS sequence before NEWKEYS, resulting in newkeys[mode] being NULL. Documented impact is DoS; remediation is to update OpenSSH to a fixed version, but the exac...
