76 matches found
CVE-2012-4927
SQL injection vulnerability in Limesurvey a.k.a PHPSurveyor before 1.91+ Build 120224 and earlier allows remote attackers to execute arbitrary SQL commands via the fieldnames parameter to index.php...
CVE-2012-4927
CVE-2012-4927 affects LimeSurvey (PHPSurveyor) systems, where SQL injection is possible through the fieldnames parameter in index.php for versions before 1.91+ Build 120224. This could allow remote attackers to execute arbitrary SQL commands, impacting confidentiality, integrity, and availability...
Joomla Multiple Components SQL Injection Vulnerabilities
This host is running Joomla with multiple components and is prone to SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbjoomlamultcomponentssqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Joomla Multiple Components SQL Injection Vulnerabilities Authors: Madhuri D Copyright:...
CVE-2010-4927
CVE-2010-4927 describes an SQL injection in the Joomla! extension component Restaurant Guide (com_restaurantguide) version 1.0.0. The vulnerability occurs in the country action of index.php, where the id parameter can be manipulated to cause arbitrary SQL execution by remote attackers. Reported i...
CVE-2010-4927
creationtimestamp| type| source ---|---|--- 2010-09-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15040...
CVE-2009-4927
CVE-2009-4927 affects WB News 2.1.2. An authentication bypass is possible by modifying the WBNEWS cookie (set to 1), allowing remote attackers to gain administrative access. The NVD entry and related records confirm a network-exposed vulnerability with a base CVSS v2 score of 7.5 (HIGH) and impac...
CVE-2009-4927
creationtimestamp| type| source ---|---|--- 2009-04-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8492...
Integer overflow
Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player WMP 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service application crash via a crafted 1 WAV, 2 SND, or 3 MID file. NOTE: this has been incorrectly reported as a...
Microsoft Windows Media Player 'MIDI' or 'DAT' File DoS Vulnerability
This host is installed with Windows Media Player and is prone to denial of service vulnerability. The vulnerability is due to error in handling 'MIDI' or 'DAT' file, related to 'MThd Header Parsing'. OpenVAS Vulnerability Test $Id: secpodmswinmediaplayerdosvuln900172.nasl 6532 2017-07-05 07:42:05...
CVE-2008-4927
CVE-2008-4927 affects Microsoft Windows Media Player (WMP) 9.0 through 11. The vulnerability is a denial-of-service condition caused by parsing errors in MIDI or DAT files, specifically related to the MThd Header Parsing . It allows a user-assisted attacker to crash the application. The available...
SuSE 10 Security Update : X.org X11 (ZYPP Patch Number 4927)
The previous xorg-x11 security update contained a flaw. Due to this some applications using the shared memory extension did not work properly anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
CVE-2007-4927
CVE-2007-4927 describes a vulnerability in the AXIS 207W camera where unauthenticated? remote authenticated users can trigger a denial of service (reboot) by issuing many requests with unique buffer names to buffername in a start action of axis-cgi/buffer/command.cgi. The connected records corrob...
Incorrect primary group assignment for
Description The idmapad.so library provides an nssinfo extension to Winbind for retrieving a user's home directory path, login shell and primary group id from an Active Directory domain controller. This functionality is enabled by defining the "winbind nss info" smb.conf option to either "sfu" or...
[SECURITY] Winbind's rfc2307 & SFU nss_info plugin in Samba 3.0.25[a-c] assigns users a primary gid of 0 by default
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================== == == Subject: Incorrect primary group assignment for == domain users using the rfc2307 or sfu == winbind nss info plugin. == == CVE ID: CVE-2007-4138 == == Versions: Samba 3.0.25 - 3.0.25c...
CVE-2006-4927
CVE-2006-4927 concerns local privilege escalation in Symantec AntiVirus products due to improper address-space validation in NAVENG.SYS and NAVEX15.SYS device drivers. The vulnerability stems from processing IOCTLs 0x222AD3, 0x222AD7, and 0x222ADB, where a crafted IRP could overwrite a user-suppl...
