39 matches found
CVE-2019-4991
CVE-2019-4991 entry is rejected/not used; this CVE ID does not represent an active vulnerability.
Security Bulletin: Memory dump from Modeler executables contains cleartext strings (CVE-2015-4991)
Summary IBM SPSS Modeler store plain text data in memory dumps, which could allow a local attacker to obtain information to aid in further attacks against the system. Vulnerability Details CVEID: CVE-2015-4991 DESCRIPTION: IBM SPSS Modeler store plain text data in memory dumps, which could allow ...
CVE-2018-4991
Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass...
CVE-2018-4991
Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable improper certificate validation vulnerability (CVE-2018-4991) that could lead to a security bypass. Affected product: Creative Cloud Desktop. Root cause: improper certificate validation. Impact: security b...
CVE-2014-4991
CVE-2014-4991 affects the Ruby gem codders-dataset (version 1.3.2.1). The vulnerability is in two files, lib/dataset/database/mysql.rb and lib/dataset/database/postgresql.rb, where credentials are placed on the mysqldump command line. This allows a local user to obtain sensitive information by li...
CVE-2017-4991
CVE-2017-4991 affects Cloud Foundry products: cf-release versions before v260 and multiple UAA releases (2.x before v2.7.4.16; 3.6.x before v3.6.10; 3.9.x before v3.9.12; others before v3.17.0) plus UAA-bosh releases (uaa-release) before v13.14, v24.9, v30.2, and earlier versions before v36. The ...
CVE-2017-4991: UAA password reset vulnerability | Cloud Foundry
Severity High Vendor Cloud Foundry Foundation Versions Affected cf-release versions prior to v260 UAA release: 2.x versions prior to v2.7.4.16 3.6.x versions prior to v3.6.10 3.9.x versions prior to v3.9.12 Other versions prior to v3.17.0 UAA bosh release uaa-release: 13.x versions prior to v13.1...
CVE-2011-4991
CVE-2011-4991 is rejected/not used per the initial description.
CVE-2015-4991
CVE-2015-4991 affects IBM SPSS Modeler (versions 14.2 FP3 IF027 and earlier; 15 FP3 IF015 and earlier; 16 FP2 IF012 and earlier; 17 FP1 IF018 and earlier; 17.1 IF008 and earlier). The issue: memory dumps contain plain text data, enabling a local attacker to read sensitive information. Impact is l...
SecureCRT <= 4.0 Beta 2 SSH1 Buffer Overflow
No description provided by source. $Id: securecrtssh1.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...
Axway Secure Transport 5.1 SP2 Path Traversal Vulnerability
Exploit for windows platform in category web applications Secure Transport Path Traversal Vulnerability Public Disclosure Date: November 11, 2012 Vendors Affected: Axway http://www.axway.com Systems Affected: Secure Transport Problem: A path traversal vulnerability was identified in SecureTranspo...
CVE-2010-4991
The CVE-2010-4991 entry describes an SQL injection in the NinjaMonials Joomla! component (com_ninjamonials). The vulnerability occurs when an attacker supplies a crafted Itemid parameter in a display action to index.php, leading to arbitrary SQL execution. Affected software is the NinjaMonials co...
CVE-2009-4991
CVE-2009-4991 describes a cross-site scripting (XSS) vulnerability in Omnistar Recruiting, specifically in users/resume_register.php, exploitable via the job2 parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Documents do not provide exploit code, affect...
CVE-2009-4991
Cross-site scripting XSS vulnerability in users/resumeregister.php in Omnistar Recruiting allows remote attackers to inject arbitrary web script or HTML via the job2 parameter...
CVE-2009-4991
creationtimestamp| type| source ---|---|--- 2009-09-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34618...
CVE-2008-4991
EC-CUBE (LOCKON CO.,LTD.) contains an SQL injection vulnerability (CVE-2008-4991) affecting EC-CUBE 2.3.0 and earlier, 1.4.7 and earlier, 1.5.0-beta2 and earlier, and Community Edition 1.3.5 and earlier. The flaw allows a remote attacker to execute arbitrary SQL commands via a parameter, potentia...
CVE-2007-4991
The CVE-2007-4991 issue affects Microsoft ISA Server 2004 SP1 and SP2, where the SOCKS4 Proxy can leak the destination IP address of another user’s session. The root cause is that an empty packet to the SOCKS4 proxy elicits a response containing the last IP address proxied through the server. Imp...
