107 matches found
Sawmill < 8.6.3 Unspecified Remote Security Vulnerability
Sawmill is prone to an unspecified remote security vulnerability. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...
CVE-2015-4947
Stack-based buffer overflow in the Administration Server in IBM HTTP Server 6.1.0.x through 6.1.0.47, 7.0.0.x before 7.0.0.39, 8.0.0.x before 8.0.0.12, and 8.5.x before 8.5.5.7, as used in WebSphere Application Server and other products, allows remote authenticated users to execute arbitrary code...
CVE-2015-4947
CVE-2015-4947 is a stack-based buffer overflow in the IBM HTTP Server Administration Server, affecting IBM HTTP Server versions 6.1.0.x up to 6.1.0.47, 7.0.0.x before 7.0.0.39, 8.0.0.x before 8.0.0.12, and 8.5.x before 8.5.5.7, used with WebSphere Application Server and other products. An authent...
CVE-2015-4947
Stack-based buffer overflow in the Administration Server in IBM HTTP Server 6.1.0.x through 6.1.0.47, 7.0.0.x before 7.0.0.39, 8.0.0.x before 8.0.0.12, and 8.5.x before 8.5.5.7, as used in WebSphere Application Server and other products, allows remote authenticated users to execute arbitrary code...
Citrix XenServer Multiple Security Updates (CTX140984)
A number of security vulnerabilities have been identified in Citrix XenServer. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix XenServer 6.2 Service Pack 1. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be...
CVE-2014-4947
CVE-2014-4947 describes a buffer overflow in the HVM graphics console support of Citrix XenServer, affecting XenServer 6.2 Service Pack 1 and earlier. The connected sources corroborate that the issue concerns the HVM graphics console, with the CVE clearly stated as a buffer overflow and with unsp...
openSUSE Security Update : libpng12 (libpng12-4947)
This update of libpng12-0 fixes : - CVE-2011-2501: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Design Error CWE-DesignError - CVE-2011-2690: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 - CVE-2011-2691: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Other...
CVE-2013-4947
CVE-2013-4947 concerns Sawmill’s update/build database page, with the vulnerable condition described as affecting Sawmill versions 8.6.2 and earlier. Connected sources indicate a remote vulnerability with unspecified impact and attack vectors, and do not provide concrete root-cause details. The p...
CVE-2013-4947
Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3 allows remote attackers to have unknown impact and attack vectors...
KLA10318 Vulnerability in Sawmill
An unspecified vulnerability was found in Sawmill. By exploiting this vulnerability malicious users can cause unknown impact. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Related products Sawmill CVE list CVE-2013-4947 high Solution Update to latest...
CVE-2012-4947
CVE-2012-4947 affects Agile FleetCommander and FleetCommander Kiosk prior to 4.08, where database credentials are stored in cleartext. This information disclosure vulnerability allows remote attackers to obtain sensitive data via unspecified pages. The NVD entry confirms a medium severity (CVSS v...
CVE-2011-4947
Cross-site request forgery CSRF vulnerability in e107admin/usersextended.php in e107 before 0.7.26 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the userinclude parameter...
CVE-2011-4947
The CVE-2011-4947 entry describes a CSRF vulnerability in e107, affecting e107_admin/users_extended.php prior to version 0.7.26. Remote attackers could hijack administrator sessions and cause the execution of XSS sequences via the user_include parameter. The underlying issue is a lack of CSRF pro...
CVE-2010-4947
Cross-site scripting XSS vulnerability in advancedsearchresult.php in ALLPC 2.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...
CVE-2010-4947
CVE-2010-4947 is an XSS flaw in ALLPC 2.5 affecting advanced_search_result.php where user-supplied keywords are not properly sanitized, allowing remote attackers to inject arbitrary web script or HTML via the keywords parameter. The root cause is input handling in that script leading to client-si...
CVE-2009-4947
The CVE-2009-4947 entry details a SQL injection in the web form FrmLoginPwdReminderPopup.aspx of Q2 Solutions ConnX 4.0.20080606, exploitable via the txtEmail parameter. The root cause is improper input handling leading to arbitrary SQL execution, with the impact described as remote arbitrary com...
Bo-blogV2.1.0 跨站漏洞
文件\inc\realplay.php 这个小bug有点搞笑 ?php echo getmagicquotesgpc ? stripslashes$GET'link' : $GET'link'; ? Bo-blog V2.1.0 暂无 !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import requests ''' 原始利用链接：...
Microsoft Office .docx File Detection
Binary data 4947.prm...
