RHEL 8 : java-1.8.0-openjdk (RHSA-2022:7004)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7004 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

CVE-2020-7004

CVE-2020-7004 affects VISAM VBASE Editor v11.5.0.2 and VBASE Web-Remote Module. The issue is weak or insecure permissions on the VBASE directory, enabling elevation of privileges when a privileged user runs the application. Public sources in the connected documents confirm this vulnerability and ...

VISAM Automation Base (VBASE) (Update B)

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: VISAM Equipment: VBASE Vulnerabilities: Relative Path Traversal, Incorrect Default Permissions, Inadequate Encryption Strength, Insecure Storage of Sensitive Information, Stack-based Buffer Overflow...

Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Exploit Authors: Dan Bohan, Scott Goodwin, OCD Tech Vendor Homepage: https://www.avaya.com/en/ Software Link:...

Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting

Exploit Title: Avaya IP Office Application Server 11.0.0.0 - Reflective Cross-Site Scripting Release Date: 2019-12-11 Exploit Authors: Dan Bohan, Scott Goodwin, OCD Tech Vendor Homepage: https://www.avaya.com/en/ Software Link: https://www.avaya.com/en/products/unified-communications/voip/...

CVE-2019-7004

Avaya IP Office Application Server 11.x WebUI is vulnerable to Cross-Site Scripting (XSS) in the login page (via POST) due to improper input sanitization. Exploitation exists (POST username) and could execute arbitrary JavaScript in a user’s browser. Affected versions include 11.x up to 11.0 FP4 ...

CVE-2018-7004

This CVE entry is rejected and not used.

CVE-2017-7004

CVE-2017-7004 describes a race condition in userspace entitlement checks that could allow a local attacker to bypass entitlement restrictions and send privileged XPC messages. Affected products are Apple iOS prior to 10.3.2 and macOS prior to 10.12.5. The root cause is a race in how entitlements ...

CVE-2017-7004

creationtimestamp| type| source ---|---|--- 2017-06-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42145...

CVE-2016-7004

Technical details about CVE-2016-7004 are not publicly available in the provided documents. Monitor for updates from official advisories; current entries reference Adobe products but do not specify root cause, affected versions, or mitigation.

CVE-2016-7004

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

CVE-2015-7004

CVE-2015-7004 affects the Apple iOS kernel prior to 9.1. The vulnerability is a kernel input-validation issue that allows a local attacker with crafted app context to cause a denial of service. Affected component: Kernel (iOS), specifically the input validation path in the kernel as described in ...

CVE-2014-7004

The CVE-2014-7004 entry concerns the PETA (com.peta.android) Android app version 1.1, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Public sources (NVD/NVD-linked reco...

CVE-2013-7004

CVE-2013-7004 affects multiple D-Link DSR router models (DSR-150/150N/250/250N/500/500N/1000/1000N) with specific firmware versions vulnerable to a hardcoded admin username (gkJ9232xXyruTRmY). The root cause is the presence of a hardcoded credential that enables remote access by knowledge of the ...

SuSE 10 Security Update : libmikmod (ZYPP Patch Number 7004)

Specially crafted 'Impulse Tracker' and 'Ultratracker' files could cause a heap based buffer overflow in libmikmod. Attackers could exploit that to crash or potentially execute code in applications linking against libmikmod. CVE-2009-3995 / CVE-2009-3996 %NASLMINLEVEL 70300 C Tenable Network...

CVE-2008-7004

ELOG before 2.7.1 is affected by multiple vulnerabilities, including a remote buffer overflow (likely in elog.c) with CVSS-like indication of high impact. Affected product: Electronic Logbook (ELOG); vulnerable component/file: elog.c; version prior to 2.7.1. OpenVAS confirms multiple issues and l...

CVE-2006-7004

Cross-site scripting XSS vulnerability in emailrequest.php in PSY Auction allows remote attackers to inject arbitrary web script or HTML via the userid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-7004

The CVE-2006-7004 entry documents a Cross-site Scripting (XSS) vulnerability in the PSY Auction project, specifically in email_request.php, exploitable via the user_id parameter. The vulnerability description indicates that remote attackers can inject arbitrary web script or HTML, implying potent...