Malware in wlwz-2312-7004

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MSC-2022-7004

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

RHEL 8 : java-1.8.0-openjdk (RHSA-2022:7004)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7004 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

CVE-2020-7004

CVE-2020-7004 affects VISAM VBASE Editor v11.5.0.2 and VBASE Web-Remote Module. The issue is weak or insecure permissions on the VBASE directory, enabling elevation of privileges when a privileged user runs the application. Public sources in the connected documents confirm this vulnerability and ...

VISAM Automation Base (VBASE) (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: VISAM Equipment: VBASE Vulnerabilities: Relative Path Traversal, Incorrect Default Permissions, Inadequate Encryption Strength, Insecure Storage of Sensitive Information, Stack-based Buffer Overflow...

Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Exploit Authors: Dan Bohan, Scott Goodwin, OCD Tech Vendor Homepage: https://www.avaya.com/en/ Software Link:...

Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting

Exploit Title: Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Release Date: 2019-12-11 Exploit Authors: Dan Bohan, Scott Goodwin, OCD Tech Vendor Homepage: https://www.avaya.com/en/ Software Link: https://www.avaya.com/en/products/unified-communications/voip/...

CVE-2019-7004

Avaya IP Office Application Server 11.x WebUI is vulnerable to Cross-Site Scripting (XSS) in the login page (via POST) due to improper input sanitization. Exploitation exists (POST username) and could execute arbitrary JavaScript in a user’s browser. Affected versions include 11.x up to 11.0 FP4 ...

CVE-2018-7004

This CVE entry is rejected and not used.

CVE-2017-7004

CVE-2017-7004 describes a race condition in userspace entitlement checks that could allow a local attacker to bypass entitlement restrictions and send privileged XPC messages. Affected products are Apple iOS prior to 10.3.2 and macOS prior to 10.12.5. The root cause is a race in how entitlements ...

CVE-2017-7004

creationtimestamp| type| source ---|---|--- 2017-06-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42145...

CVE-2016-7004

Technical details about CVE-2016-7004 are not publicly available in the provided documents. Monitor for updates from official advisories; current entries reference Adobe products but do not specify root cause, affected versions, or mitigation.

CVE-2016-7004

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-7004

CVE-2015-7004 affects the Apple iOS kernel prior to 9.1. The vulnerability is a kernel input-validation issue that allows a local attacker with crafted app context to cause a denial of service. Affected component: Kernel (iOS), specifically the input validation path in the kernel as described in ...

CVE-2014-7004

The CVE-2014-7004 entry concerns the PETA (com.peta.android) Android app version 1.1, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Public sources (NVD/NVD-linked reco...

CVE-2013-7004

CVE-2013-7004 affects multiple D-Link DSR router models (DSR-150/150N/250/250N/500/500N/1000/1000N) with specific firmware versions vulnerable to a hardcoded admin username (gkJ9232xXyruTRmY). The root cause is the presence of a hardcoded credential that enables remote access by knowledge of the ...

SuSE 10 Security Update : libmikmod (ZYPP Patch Number 7004)

Specially crafted 'Impulse Tracker' and 'Ultratracker' files could cause a heap based buffer overflow in libmikmod. Attackers could exploit that to crash or potentially execute code in applications linking against libmikmod. CVE-2009-3995 / CVE-2009-3996 %NASLMINLEVEL 70300 C Tenable Network...

CVE-2008-7004

ELOG before 2.7.1 is affected by multiple vulnerabilities, including a remote buffer overflow (likely in elog.c) with CVSS-like indication of high impact. Affected product: Electronic Logbook (ELOG); vulnerable component/file: elog.c; version prior to 2.7.1. OpenVAS confirms multiple issues and l...

CVE-2006-7004

Cross-site scripting XSS vulnerability in emailrequest.php in PSY Auction allows remote attackers to inject arbitrary web script or HTML via the userid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-7004

The CVE-2006-7004 entry documents a Cross-site Scripting (XSS) vulnerability in the PSY Auction project, specifically in email_request.php, exploitable via the user_id parameter. The vulnerability description indicates that remote attackers can inject arbitrary web script or HTML, implying potent...