58 matches found
CVE-2015-4964
IBM UrbanCode Deploy (UCD) vulnerable in versions 6.0 and 6.0.1.x before 6.0.1.10, 6.1.1.x before 6.1.1.8, and 6.1.2. Affected users who can create and execute processes can have the admin AUTH_TOKEN value written to execution logs, enabling privilege escalation by a non-admin user who can run st...
CVE-2014-4964
Shopizer
CVE-2013-4964
CVE-2013-4964 affects Puppet Enterprise before 3.0.1, where the session cookie is not marked as Secure in an HTTPS session. This allows an attacker intercepting traffic on an HTTP fallback or mixed-channel to capture the session cookie, potentially enabling unauthorized access. The description do...
Samsung / Dell Printer SNMP Backdoor
The remote host appears to be a Samsung printer, or a Dell printer manufactured by Samsung. It has a hard-coded SNMP read-write community string that allows access even when SNMP has been disabled in the printer management utility. A remote, unauthenticated attacker can exploit this to take contr...
CVE-2012-4964
The CVE-2012-4964 vulnerability affects Samsung printer firmware prior to 20121031 that ships with a hardcoded read-write SNMP community string. This enables remote attackers to obtain administrative access over SNMP, potentially taking full control of affected devices (including some Dell-brande...
CVE-2011-4964
CVE-2011-4964 is a duplicate of CVE-2012-2667 and is thus not the active vulnerability entry. Connected documents show concrete details for CVE-2012-2667 related to the same software family: php-symfony-symfony. The Fedora advisories (FEDORA-2012-8911, -8966, -8985) and OpenVAS/Nessus entries rep...
CVE-2010-4964
The CVE-2010-4964 entry refers to a vulnerability in the D-Link DCS-2121 IP camera (firmware 1.04) where recorder_test.cgi is vulnerable to shell metacharacter input in the Password field, enabling remote command execution via a semicolon injection. Multiple connected sources (Red Hat advisory, N...
CVE-2009-4964
CVE-2009-4964 describes a stack-based buffer overflow in KSP 2006 FINAL that allows remote code execution via a long string in a .M3U playlist file. The vulnerability is triggered by crafted playlist data, with a CVSS v2 base score of 9.3 (HIGH) indicating NETWORK attack vector, no authentication...
CVE-2009-4964
creationtimestamp| type| source ---|---|--- 2009-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9486...
CVE-2008-4964
filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any- temporary file...
CVE-2008-4964
filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any- temporary file...
CVE-2008-4964
filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any- temporary file...
CVE-2008-4964
The CVE-2008-4964 entry concerns the konwert project (version 1.8) where the filters/any-UTF8 component is vulnerable. An attacker with local access can delete arbitrary files by exploiting a symlink attack on a temporary file named /tmp/any-#####. The description across sources consistently attr...
CVE-2007-4964
CVE-2007-4964 affects WinImage 8.10 and earlier. A malformed BPB_BytsPerSec field in the header of a .IMG file can allow remote attackers to cause a denial of service via an infinite loop. The available connected documents confirm the affected product and the underlying cause, but do not provide ...
CVE-2006-4964
MAXdev MDPro contains a cross-site scripting (XSS) vulnerability in versions prior to 1.0.76, fixed in a release after 20060918. The issue arises from vectors that bypass the pnVarCleanFromInput XSS protections and from unspecified AntiCracker-related vectors. Affected product/component: MAXdev M...
