101 matches found
USN-3016-1: Linux kernel vulnerabilities
Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility IPTSOSETREPLACE events on 64 bit platforms. A local unprivileged attacker could use this to cause a denial of service system crash or execute...
CVE-2016-4998
An out-of-bounds heap memory access leading to a Denial of Service, heap disclosure, or further impact was found in setsockopt. The function call is normally restricted to root, however some processes with capsysadmin may also be able to trigger this flaw in privileged container environments...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF19, and 8.5.0 before CF08 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a different...
CVE-2015-4998
CVE-2015-4998 affects IBM WebSphere Portal across multiple versions (6.1.0 up to CF08 of 8.5.0). The vulnerability is a Cross-Site Scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML through a crafted URL. The available connected documents confirm the affected...
Fedora Update for phpMyAdmin FEDORA-2014-8581
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for phpMyAdmin FEDORA-2014-8577
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
phpMyAdmin 3.5.x < 3.5.8.2 / 4.0.x < 4.0.4.2 Multiple Vulnerabilities (PMASA-2013-8 - PMASA-2013-15
According to its self-identified version number, the phpMyAdmin install hosted on the remote web server is 3.5.x earlier than 3.5.8.2 or 4.0.x earlier than 4.0.4.2. It is, therefore, affected by the following vulnerabilities : - Numerous input validation errors exist that could lead to cross-site...
CVE-2013-4998
CVE-2013-4998 affects phpMyAdmin, specifically 3.5.x (before 3.5.8.2) and 4.0.x (before 4.0.4.2). The vulnerability allows remote attackers to disclose sensitive information by triggering an error message that reveals the installation path, via pmd_common.php and related files. The issue impacts ...
CVE-2012-4998
CVE-2012-4998 is an XSS vulnerability in starCMS, specifically in index.php where the q parameter can inject arbitrary web script/HTML. Multiple sources (NVD, CVE listings, PRION/CVE, CVELIST) corroborate the vulnerability and link it to starCMS. The exploitation context remains that the q parame...
CVE-2012-4998
creationtimestamp| type| source ---|---|--- 2012-03-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36895...
CVE-2010-4998
CVE-2010-4998 affects the ardeaCore PHP Framework 2.2. A PHP remote file inclusion flaw in ardeaCore/lib/core/ardeaInit.php allows an attacker to execute arbitrary PHP code via a URL supplied to the pathForArdeaCore parameter. NVD records a base CVSS v2 score of 7.5 (HIGH) with network access and...
Elecard MPEG Player 5.7 - Local Buffer Overflow (PoC) (SEH)
Elecard MPEG Player 5.7 - Local Buffer Overflow PoC SEH !/usr/bin/python Elecard MPEG Player 5.7 Local Buffer Overflow PoC SEH Vendor: Elecard Group Product web page: http://www.elecard.com Affected version: 5.7.100629 Summary: Elecard MPEG Player is a high-quality full-featured multimedia player...
CVE-2009-4998
The vulnerability described as CVE-2009-4998 affects the Workplace (WP) component of IBM FileNet P8 Application Engine (P8AE) . It applies to versions 3.5.1 before 3.5.1-019 and 4.0.2.x before 4.0.2.7-P8AE-FP007 , in certain FileTracker configurations. The issue is that the component does not app...
CVE-2008-4998
postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid...
CVE-2008-4998
CVE-2008-4998 affects TWiki 4.1.2: the postinst script allows a local user to overwrite arbitrary files via a symlink attack on /tmp/twiki. Multiple connected sources corroborate the issue, with vendor dispute noting the bug is invalid. The documents do not specify a fix or mitigations. The explo...
CVE-2007-4998
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination...
CVE-2007-4998
CVE-2007-4998 is a local, user‑assisted vulnerability in cp when preserving symlinks across multiple OSes. The issue allows an attacker to cause a race/symlink attack that can overwrite arbitrary files by crafting directories with multiple source files copied to the same destination. Multiple con...
CVE-2023-4998
CVE-2023-4998 corresponds to a GitLab vulnerability where an attacker could abuse scheduled security scan policies to run pipelines as another user, potentially gaining elevated privileges. The issue affects GitLab CE/EE versions 13.12 through 16.2.7 and 16.3 through 16.3.4. The mitigation is to ...
