CVE-2011-4968

nginx http proxy module does not verify peer identity of https origin server which could facilitate man-in-the-middle attack MITM...

CVE-2011-4968

CVE-2011-4968 concerns the nginx http proxy module failing to verify the peer identity of the HTTPS origin server, enabling potential MITM attacks. The vulnerability is described as an information-security issue in the nginx proxy component where TLS peer verification is not performed for upstrea...

CVE-2015-4968

CVE-2015-4968 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-4968

CVE-2018-4968 refers to a Heap Overflow vulnerability in Adobe Acrobat and Reader. According to the provided details, affected products include Windows/macOS versions of Acrobat/Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier. The vulnerability could ...

Adobe Acrobat 2017 Security Updates (APSB18-09) - Mac OS X

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Adobe Acrobat 2017 Security Updates (APSB18-09) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

CVE-2017-4968

CVE-2017-4968 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-4968

...

CVE-2016-4968

CVE-2016-4968 affects Fortinet FortiWAN (FortiWan) before 4.2.5. An authenticated but non-admin user can issue a GET request to the path /linkreport/tmp/admin_global and obtain an administrator cookie, enabling elevation of access. The vulnerability is an information disclosure flaw in the linkre...

Joomla Component com_wmtpic SQL Injection (CVE-2010-4968)

An SQL injection vulnerability has been reported in Webmaster-tips Com Wmtpic. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Boat Browser 8.0 and 8.0.1 - Remote Code Execution Vulnerability

No description provided by source. !-- .:: Remote code execution vulnerability in Boat Browser ::. credit: c0otlass social contact: https://twitter.com/c0otlass mail: [email protected] CVE reserved : 2014-4968 time of discovery: July 14, 2014 Browser Official site:http://www.boatmob.com/ Browser...

Boat Browser 8.0 / 8.0.1 Remote Code Execution

CreatMalTxt POC - WebView var obj; function TestVulnerability temp="not"; var myObject = window; for var name in myObject if myObject.hasOwnPropertyname try temp=myObjectname.getClass.forName'java.lang.Runtime'.getMethod'getRuntime',null.invokenull,null; catche iftemp=="not"...

nginx 中间人攻击漏洞(CVE-2011-4968)

Bugtraq ID:57139 CVE ID:CVE-2011-4968 nginx是一款高性能的web服务器，使用非常广泛，其不仅经常被用作反向代理，也可以非常好的支持PHP的运行 nginx包含的Http代理模块允许通过https与源服务器通信，但是没有正确校验源服务器身份，允许攻击者在代理和源服务器之间进行中间人攻击 0 Igor Sysoev nginx 0.8.40 Igor Sysoev nginx 0.8.36 Igor Sysoev nginx 0.8.35 Igor Sysoev nginx 0.8.33 Igor Sysoev nginx 0.7.66 Igor...

CVE-2012-4968

CVE-2012-4968 affects SilverStripe 2.3.x (pre-2.3.13) and 2.4.x (pre-2.4.7), enabling remote XSS via multiple template input points (e.g., AbsoluteLinks, BigSummary, ContextSummary, EscapeXML, FirstParagraph, FirstSentence, Initial, etc.). The vulnerability allows injection of arbitrary script/HT...

CVE-2010-4968

CVE-2010-4968 documents a SQL injection vulnerability in the webmaster-tips.net Flash Gallery (com_wmtpic) component version 1.0 for Joomla! that lets remote attackers execute arbitrary SQL commands via the Itemid parameter to index.php. Affected software: Joomla! ecosystem with com_wmtpic 1.0. R...

CVE-2009-4968

CVE-2009-4968 concerns a SQL injection in the TYPO3 Event Registration (event_registr) extension, versions up to 1.0.0. Root cause: unsanitized input enabling arbitrary SQL execution via unspecified vectors. Impact: remote attacker can affect confidentiality, integrity, and availability. CVSSv2 b...

[ GLSA 200909-10 ] LMBench: Insecure temporary file usage

Gentoo Linux Security Advisory GLSA 200909-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2008-4968

The CVE-2008-4968 entry concerns lmbench (version 3.0-a7) where the rccs and STUFF scripts insecurely handle /tmp/sdiff.##### temporary files, enabling local attackers to perform symlink attacks and overwrite arbitrary files with the invoking user’s privileges. Documentation consistently cites lo...

CVE-2007-4968

CVE-2007-4968 – Normal mode \n\nAffected product: Privatefirewall 5.0.14.2.\nWhat is vulnerable: the system service descriptor table (SSDT) function handlers are not properly validated for certain parameters, enabling an attacker with local access to trigger a denial of service (crash) and potent...

CVE-2006-4968

PNphpBB 1.2g is affected by a PHP remote file inclusion vulnerability in includes/functions_admin.php, exploitable via the phpbb_root_path parameter to execute arbitrary PHP code when a URL is supplied. This aligns with CVE-2006-4968 as described by NVD, with a base score of 7.5 (HIGH) and networ...