56 matches found
Layton Helpbox 4.4.0 Login Bypass
Layton Helpbox 4.4.0 Login Bypass Vulnerability by Joseph Sheridan Summary Layton Technologies Helpbox product version 4.4.0 is vulnerable to a login bypass vulnerability. CVE number: CVE-2012-4974 Impact: High Vendor homepage: http://www.laytontechnology.com Vendor notified: 10/09/2012 Vendor...
CVE-2010-4974
CVE-2010-4974 describes an SQL injection in info.php for BrotherScripts (BS) and ScriptsFeed Auto Dealer. The vulnerability allows remote attackers to inject SQL commands through the id parameter, with a network attack vector and low complexity, resulting in partial confidentiality, integrity, an...
CVE-2009-4974
TotalCalendar 2.4 is affected by a directory traversal vulnerability in box_display.php that allows remote attackers to read arbitrary files via a .. sequence in the box parameter. The issue is confirmed in multiple feeds (CVE-2009-4974; OpenVAS entry cites TotalCalendar SQL Injection and Directo...
CVE-2009-4974
Directory traversal vulnerability in boxdisplay.php in TotalCalendar 2.4 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the box parameter...
CVE-2009-4974
creationtimestamp| type| source ---|---|--- 2009-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9524...
CVE-2008-4974
CVE-2008-4974 affects rrdedit in netmrg 0.20. The issue allows a local attacker to overwrite arbitrary files via a symlink attack on temporary files under /tmp (*/.xml and */.backup). Root cause is a local-file write vulnerability tied to symlink handling in rrdedit, enabling manipulation of file...
Gentoo Security Advisory GLSA 200710-04 (libsndfile)
The remote host is missing updates announced in advisory GLSA 200710-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
SuSE 10 Security Update : Tk (ZYPP Patch Number 4974)
Specially crafted GIF images could cause a buffer overflow and crash tk. It seems unlikely but not entirely impossible that this overflow can be exploited to execute arbitrary code. CVE-2008-0553 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell,...
openSUSE 10 Security Update : libsndfile (libsndfile-4430)
This update fixes a possible buffer overflow that occurs while reading decoded PCM data from the FLAC library. CVE-2007-4974 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libsndfile-4430. Th...
SuSE 10 Security Update : libsndfile (ZYPP Patch Number 4431)
This update fixes a possible buffer overflow that occurs while reading decoded PCM data from the FLAC library. CVE-2007-4974 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
CVE-2007-4974
Heap-based buffer overflow in the flacbuffercopy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC file with crafted PCM data containing a block with a size that exceeds the previous block size...
CVE-2007-4974
Technical details about CVE-2007-4974 are not publicly provided in the connected documents. No concrete information on affected versions, impact or fixes is included here; monitor for official updates.
CVE-2006-4974
CVE-2006-4974 affects Ipswitch WS_FTP Limited Edition 5.08. A buffer overflow in the FTP server’s handling of PASV responses allows a remote attacker to execute arbitrary code. The advisory states remote code execution is possible via a long PASV reply, signaling a high-severity, network-exposed ...
