48 matches found
Debian: Security Advisory (DSA-4941-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-4941
CVE-2019-4941 is rejected/not used and does not represent an active vulnerability entry.
Security Bulletin: Open Source VMware Fusion Vulnerabilities in IBM Pure Application System (CVE-2017-4903, CVE-2017-4904, CVE-2017-4905)
Summary Multiple vulnerabilities in Open Source VMware affects IBM PureApplication System. IBM PureApplication System has addressed Common Vulnerabilities Exposures CVE-2017-4903, CVE-2017-4904, CVE-2017-4905. Additionally this bulletin includes information about the release of fix for Common...
Security Bulletin: Malformed client flows abend MQTT channel (CVE-2015-4943, CVE-2015-4941, CVE-2015-4942)
Summary A number of malformed MQTT client flows could be issued by a malicious user to cause the MQXR service to abend and require manual restart. Vulnerability Details CVEID: CVE-2015-4943 DESCRIPTION: IBM WebSphere MQ could allow a remote attacker to crash the MQXR service using a sequence of...
Adobe ColdFusion 11.x < 11u14 / 2016.x < 2016u6 Multiple Vulnerabilities (APSB18-14)
The version of Adobe ColdFusion running on the remote Windows host is 11.x prior to update 14 or 2016.x prior to update 6. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid109017; scriptversion"1.9";...
VMware Player 12.x < 12.5.8 Multiple Vulnerabilities (VMSA-2017-0021) (VMSA-2018-0002) (Spectre)
The version of VMware Player installed on the remote Windows host is 12.x prior to 12.5.8. It is, therefore, affected by multiple vulnerabilities that can allow code execution in a virtual machine via the authenticated VNC session as well as cause information disclosure from one virtual machine t...
CVE-2017-4941
CVE-2017-4941 affects VMware products: ESXi 6.0 (pre-ESXi600-201711101-SG) and ESXi 5.5 (pre-ESXi550-201709101-SG); Workstation 12.x (pre-12.5.8); and Fusion 8.x (pre-8.5.9). The vulnerability is a stack overflow in the remote management function triggered by a specific set of VNC packets, which ...
VMware VNC Pointer Decode Code Execution Vulnerability(CVE-2017-4941)
Summary An exploitable code execution vulnerability exists in the remote management functionality of VMware . A specially crafted set of VNC packets can cause a type confusion resulting in stack overwrite, which could lead to code execution. An attacker can initiate a VNC session to trigger this...
VMSA-2017-0021:VMware ESXi, vCenter Server Appliance, Workstation and Fusion updates address multiple security vulnerabilities
VMSA-2017-0021 VMware ESXi, vCenter Server Appliance, Workstation and Fusion updates address multiple security vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0021 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware ESXi,...
globalsources.com XSS vulnerability
Vulnerable URL: http://www.globalsources.com/?catalogid=" Details: Description| Value ---|--- Patched:| Yes, at 11.06.2016 Latest check for patch:| 11.06.2016 06:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4941 VIP website status:| Yes Check...
CVE-2015-4941
CVE-2015-4941 affects IBM WebSphere MQ Light 1.x before 1.0.2, where mishandling of abbreviated TLS handshakes can enable a remote attacker to crash the MQXR service (denial of service). IBM security bulletins corroborate affected products and versions (MQ Light V1.0 and V1.0.1) and describe the ...
CVE-2014-4941
Cross-RSS for WordPress (plugin 1.7) is affected by an Absolute Path Traversal via the rss parameter to proxy.php, enabling reading arbitrary server files. Root cause: local file inclusion in the plugin’s handling of the rss input. Impact: potential exposure of sensitive files on the server. Reme...
CVE-2013-4941
Cross-site scripting XSS vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary we...
CVE-2013-4941
CVE-2013-4941 describes a Cross-site scripting (XSS) vulnerability in uploader.swf (Uploader component) of Yahoo! YUI 3.2.0–3.9.1, which is used in Moodle up to specific versions. The flaw allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. The affected s...
CVE-2012-4941
CVE-2012-4941 covers multiple SQL injection vulnerabilities in Agile FleetCommander and FleetCommander Kiosk prior to 4.08, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected are Agile FleetCommander and FleetCommander Kiosk versions before 4.08; vendor ...
CVE-2011-4941
CVE-2011-4941 affects Piwik (now Matomo) versions 1.2 through 1.4. The vulnerability enables remote code execution for users with view permission, via unknown attack vectors. The public documents consistently describe an unspecified vulnerability allowing arbitrary code execution, with the CVE en...
CVE-2010-4941
CVE-2010-4941 concerns a SQL injection in the Joomla! Teams component (com_teams) for version 1_1028_100809_1711. The vulnerability is triggered through the PlayerID parameter in a player save action to index.php, allowing remote attackers to execute arbitrary SQL commands. Connected sources corr...
