42 matches found
Adobe Acrobat 2017 Security Updates (APSB18-09) - Mac OS X
Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
Adobe Acrobat 2017 Security Updates (APSB18-09) - Windows
Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
CVE-2017-4960
An issue was discovered in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and UAA Bosh Release v21 through v26. There is a potential to subject the UAA OAuth clients to a denial of service attack...
CVE-2017-4960
The CVE-2017-4960 issue affects Cloud Foundry components where the UAA OAuth clients can be subjected to a denial-of-service due to the lockout feature. Affected are Cloud Foundry release v247–v252, UAA standalone releases v3.9.0–v3.11.0, and UAA Bosh Releases v21–v26. If exploited, this could im...
CVE-2016-4960
CVE-2016-4960 affects NVIDIA Quadro, NVS, and GeForce Windows drivers via the NVStreamKMS.sys driver. The root cause is improper validation of user-supplied data through API entry points, leading to local privilege escalation. The vulnerability is documented across multiple sources (NVD entry and...
CVE-2015-4960
The IBM InfoSphere Master Data Management Collaborative Edition (GDS component) is vulnerable to clickjacking (and related client-side issues) in versions 9.1, 10.1, 11.0 before 11.0.0.0 IF11, 11.3 before 11.3.0.0 IF7, and 11.4 before 11.4.0.4 IF1. An attacker could remotely lure an authenticated...
CVE-2014-4960
CVE-2014-4960 affects Joomla! YouTube Gallery (com_youtubegallery) up to version 4.1.7 (possibly 3.x); SQL injection in models/gallery.php enables remote SQL execution via listid and themeid/mobilethemeid parameters in index.php. Evidence from multiple sources shows vulnerable code paths (e.g., J...
Joomla Youtube Gallery Component - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla component comyoutubegallery - SQL Injection vulnerability Google Dork: inurl:index.php?option=comyoutubegallery Date: 15-07-2014 Exploit Author: Pham Van Khanh email protected Vendor Homepage:...
Joomla Youtube Gallery 4.1.7 SQL Injection
Exploit Title: Joomla component comyoutubegallery - SQL Injection vulnerability Google Dork: inurl:index.php?option=comyoutubegallery Date: 15-07-2014 Exploit Author: Pham Van Khanh [email protected] Vendor Homepage: http://www.joomlaboat.com/youtube-gallery Software Link:...
CVE-2014-4960
creationtimestamp| type| source ---|---|--- 2014-07-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34087...
Joomla! Component Youtube Gallery 4.1.7 - SQL Injection
Exploit Title: Joomla component comyoutubegallery - SQL Injection vulnerability Google Dork: inurl:index.php?option=comyoutubegallery Date: 15-07-2014 Exploit Author: Pham Van Khanh [email protected] Vendor Homepage: http://www.joomlaboat.com/youtube-gallery Software Link:...
Fedora Update for jbigkit FEDORA-2014-4960
Check for the Version of jbigkit OpenVAS Vulnerability Test Fedora Update for jbigkit FEDORA-2014-4960 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CVE-2012-4960
CVE-2012-4960 covers a DES-based password encryption weakness in Huawei networking devices (including NE5000E, NE40E/80E, CX/ CX600, and related models). The root cause is use of DES for stored passwords, enabling brute-force or context-dependent attacks to recover cleartext passwords. Public adv...
CVE-2012-4960
creationtimestamp| type| source ---|---|--- 2012-11-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/38020 2025-02-03 22:00:06+00:00| exploited| Telegram/1n2fROMf6I7Wv387p2J29DCLWRThyaiFYhxdgIgWSfEj2iI 2025-02-07 14:43:48+00:00| seen|...
CVE-2011-4960
SQL injection vulnerability in the Folder::findOrMake method in SilverStripe 2.3.x before 2.3.12 and 2.4.x before 2.4.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2011-4960
SilverStripe releases 2.3.x prior to 2.3.12 and 2.4.x prior to 2.4.6 contain an SQL injection in Folder::findOrMake that allows remote execution of arbitrary SQL via unspecified vectors. Impact is described as remote code execution on the database side with partial confidentiality/integrity/avail...
CVE-2010-4960
The CVE-2010-4960 entry concerns an XSS vulnerability in the TYPO3 extension mh_branchenbuch, affecting versions prior to 0.9.1. Remote attackers can inject arbitrary script/HTML via unspecified vectors. Root cause details are not fully disclosed in the provided documents, but the fix is to upgra...
CVE-2009-4960
Directory traversal vulnerability in modules/backup/download.php in Lanai Core 0.6 allows remote attackers to read arbitrary files via a .. dot dot in the f parameter...
CVE-2009-4960
CVE-2009-4960 describes a directory traversal in Lanai Core 0.6, where an attacker can read arbitrary files by supplying a ".." in the f parameter to modules/backup/download.php. Multiple connected sources (NVD, CVE lists, PRION, CVELIST, EUVD) corroborate the same description. The core cause is ...
