CVE-2017-4950

VMware Workstation and Fusion contain an integer overflow in the VMware NAT service when IPv6 mode is enabled, potentially causing an out-of-bounds read that can lead to host code execution with additional issues. IPv6 VMNAT mode is not enabled by default. Vendor advisories (VMSA-2018-0004/0005) ...

CVE-2014-4950

CVE-2014-4950 is rejected/not used and does not represent an active vulnerability entry.

CVE-2014-4950

...

CVE-2016-4950

Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions...

CVE-2016-4950

CVE-2016-4950 affects Cloudera Manager 5.5 and earlier. A remote attacker could enumerate user sessions by calling /api/v11/users/sessions, exposing active sessions information. Public descriptions confirm the issue is an access-control flaw in the sessions API. The IBM security bulletin maps CVS...

CVE-2013-4950

Cross-site scripting XSS vulnerability in view.php in Machform 2 allows remote attackers to inject arbitrary web script or HTML via the element2 parameter...

CVE-2013-4950

CVE-2013-4950 describes a cross-site scripting (XSS) vulnerability in Machform 2, specifically in the file/view handler view.php . The issue allows remote attackers to inject arbitrary web script or HTML by submitting input in the element_2 parameter. The provided documents do not specify affecte...

CVE-2012-4950

Cross-site scripting XSS vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to inject arbitrary web script or HTML via crafted characters that are not properly handled during construction of error messages...

CVE-2012-4950

CVE-2012-4950 is a reflected cross-site scripting vulnerability in the Keyword Search page of the Pattern Insight 2.3 web interface. The issue arises because certain characters in error-message construction are not properly escaped, allowing a remote attacker to inject arbitrary script/HTML via a...

CVE-2012-4950

Cross-site scripting XSS vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to inject arbitrary web script or HTML via crafted characters that are not properly handled during construction of error messages...

CVE-2011-4950

CVE-2011-4950 is an XSS vulnerability in EGroupware: the file phpgwapi/js/jscalendar/test.php exposes the lang parameter, enabling remote attackers to inject arbitrary web script or HTML. Affected products are EGroupware Enterprise Line (EPL) before 11.1.20110804-1 and EGroupware Community Editio...

CVE-2010-4950

SQL injection vulnerability in the Event event extension before 0.3.7 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4950

The CVE-2010-4950 entry concerns the TYPO3 Event extension, affected in versions prior to 0.3.7. The vulnerability is a SQL injection flaw that allows remote attackers to execute arbitrary SQL commands through unspecified vectors. This is tied to the Event extension itself, and the impact is serv...

EGroupware Multiple Vulnerabilities (May 2011) - Active Check

EGroupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:egroupware:egroupware";...

CVE-2009-4950

SQL injection vulnerability in the A21glossary Advanced Output a21glossaryadvancedoutput extension before 0.1.12 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4950

The CVE concerns the TYPO3 extension A21glossary Advanced Output (a21glossary_advanced_output) prior to version 0.1.12. The issue is a SQL injection vulnerability in the extension that could allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected component: a21g...

CVE-2008-4950

gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments...

CVE-2008-4950

gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments...

CVE-2008-4950

CVE-2008-4950 affects dpkg-cross 2.3.0 and its gccross component, enabling local users to overwrite arbitrary files via a symlink attack on the temporary file tmp/gccross2.log. The vulnerability is consistently described across sources (NVD, Debian/GNU, Ubuntu trackers, OSV, and Nessus mention un...

CVE-2007-4950

PHP remote file inclusion vulnerability in form/dbform/employee.php in PHPortal 0.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter. NOTE: this issue is disputed by CVE, since DOCUMENTROOT cannot be modified by an attacker...