NFR Agent FSFUI Record File Upload RCE

NFRAgent.exe, a component of Novell File Reporter NFR, allows remote attackers to upload arbitrary files via a directory traversal while handling requests to /FSF/CMD with FSFUI records with UICMD 130. This module has been tested successfully against NFR Agent 1.0.4.3 File Reporter 1.0.2 and NFR...

CVE-2011-4959

SQL injection vulnerability in the addslashes method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6, when connected to a MySQL database using far east character encodings, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-4959

CVE-2011-4959 affects SilverStripe: SQL injection in the addslashes method for SilverStripe 2.3.x < 2.3.12 and 2.4.x

CVE-2010-4959

SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2010-4959

SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2010-4959

CVE-2010-4959 describes an SQL injection vulnerability in the login feature of Pre Projects Pre Podcast Portal. The root cause is unsafely constructed SQL in the password parameter, enabling remote attackers to inject arbitrary SQL commands. Documents consistently identify the affected component ...

Microsoft Visio 2010 v14.0.4514.1004 (dwmapi.dll) DLL Hijacking Exploit

Summary Microsoft Visio is a diagramming program for Microsoft Windows that uses vector graphics to create diagrams. Description MS Visio 2010 suffers from a dll hijacking vulnerability that enables the attacker to execute arbitrary code on a local level. The vulnerable extension is .vss thru...

CVE-2009-4959

The CVE-2009-4959 entry affects the TYPO3 extension T3M E-Mail Marketing Tool (t3m) up to version 0.2.4. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Public sources (NVD, Red Hat) confirm the issue; the NVD metrics in...

CVE-2009-4959

SQL injection vulnerability in the T3M E-Mail Marketing Tool t3m extension 0.2.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-4959

creationtimestamp| type| source ---|---|--- 2010-07-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14378...

Fedora 10 : gpsdrive-2.09-7.fc10 (2009-1225)

This update removes several helper scripts: geo-code, geo-nearest, and gpssmswatch, which have been removed upstream due to security issues. This update also has a fix for an issue with the splash screen. Note that Tenable Network Security has extracted the preceding description block directly fr...

IBM Tivoli Storage Manager < 5.4.4.1 Overflow

Binary data 4959.prm...

Fedora Core 9 FEDORA-2009-1366 (gpsdrive)

The remote host is missing an update to gpsdrive announced via advisory FEDORA-2009-1366. OpenVAS Vulnerability Test $Id: fcore20091366.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1366 gpsdrive Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 9 FEDORA-2009-1366 (gpsdrive)

The remote host is missing an update to gpsdrive announced via advisory FEDORA-2009-1366. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora 9 : gpsdrive-2.09-7.fc9 (2009-1366)

This update removes several helper scripts: geo-code, geo-nearest, and gpssmswatch, which have been removed upstream due to security issues. This update also has a fix for an issue with the splash screen. Note that Tenable Network Security has extracted the preceding description block directly fr...

CVE-2008-4959

geo-code in gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/geo.google, 2 /tmp/geo.yahoo, 3 /tmp/geo.coords, and 4 /tmp/geo.coords temporary files...

CVE-2008-4959

CVE-2008-4959 affects gpsdrive-scripts (2.10~pre4). A symlink attack allows a local user to overwrite arbitrary files via temporary files (e.g., /tmp/geo.google, /tmp/geo.yahoo, /tmp/geo.coords, /tmp/geo#####.coords). Multiple sources (Red Hat, SUSE, Fedora advisories and open-source references) ...

CVE-2008-4959

geo-code in gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/geo.google, 2 /tmp/geo.yahoo, 3 /tmp/geo.coords, and 4 /tmp/geo.coords temporary files...

CVE-2007-4959

CVE-2007-4959 : Cross-site scripting (XSS) in osCMax 2.0.0-RC3-0-1, specifically in catalog_products_with_images.php, allows remote attackers to inject arbitrary web script or HTML via the URI. The description and connected sources confirm the vulnerable component and vector but do not provide re...

CVE-2006-4959

Sun Secure Global Desktop (SSGD, Tarantella) before 4.3 is vulnerable to an information disclosure where remote attackers can obtain hostnames, versions, and settings details via unspecified vectors potentially involving CGI scripts such as taarchives.cgi, ttaAuthentication.jsp, ttalicense.cgi, t...