43 matches found
CVE-2018-8972
Creditwest Bank CMS Project (CWCMS) prior to 2017-07-28 contains a cross-site request forgery (CSRF) vulnerability in the Website Configuration Update feature. This CSRF flaw enables an attacker to inject arbitrary PHP code, demonstrated by a PHP shell that calls eval on request parameters. Affec...
CVE-2018-8972
Creditwest Bank CMS Project aka CWCMS through 2017-07-28 has CSRF in the functionality for updating the site configuration, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a PHP shell that calls eval on request parameters...
CVE-2017-8972
A clickjacking vulnerability in HPE Matrix Operating Environment version 7.6 LR1 was found...
CVE-2017-8972
A clickjacking vulnerability affects HP Matrix Operating Environment (Matrix OE) 7.6 LR1. The CVE-2017-8972 entry notes a clickjacking flaw; NVD data shows CVSS scores (2.0: 4.0, 3.0: 4.3) with network access and low complexity. Connected documents also describe the same issue across multiple sou...
AIX bellmail Advisory : bellmail_advisory.asc (IV91006) (IV91007) (IV91008) (IV91010) (IV91011)
The version of bellmail installed on the remote AIX host is affected by a privilege escalation vulnerability due the use of insecure permissions. A local attacker can exploit this, via a specially crafted command, to gain root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2014-8972
This CVE-2014-8972 entry is rejected and does not represent an active vulnerability.
CVE-2016-8972
CVE-2016-8972 affects IBM AIX 6.1, 7.1 and 7.2 via the bellmail client, enabling a local user to gain root privileges through a specially crafted command. Root access hinges on insecure permissions around bellmail; APARs IV91006–IV91011 exist. AIX advisories (bellmail_advisory.asc) and exploit re...
CVE-2015-8972
Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...
CVE-2015-8972
Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...
CVE-2015-8972
GNU Chess (gnuchess) is vulnerable to a stack-based buffer overflow in the ValidateMove function (frontend/move.cc) present in version 6.2.3 and earlier; a large input can allow context-dependent attackers to execute arbitrary code, notably when running in UCI mode. Public sources consistently st...
CVE-2015-8972
Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...
IBM AIX 6.1/7.1/7.2 - 'Bellmail' Local Privilege Escalation
!/usr/bin/sh CVE-2016-8972/bellmailroot.sh: IBM AIX Bellmail local root Affected versions: AIX 6.1, 7.1, 7.2 VIOS 2.2.x Fileset Lower Level Upper Level KEY --------------------------------------------------------- bos.net.tcp.client 6.1.9.0 6.1.9.200 keywfs bos.net.tcp.client 7.1.3.0 7.1.3.47...
IBM AIX 6.1 / 7.1 / 7.2 Bellmail Privilege Escalation
!/usr/bin/sh CVE-2016-8972/bellmailroot.sh: IBM AIX Bellmail local root Affected versions: AIX 6.1, 7.1, 7.2 VIOS 2.2.x Fileset Lower Level Upper Level KEY --------------------------------------------------------- bos.net.tcp.client 6.1.9.0 6.1.9.200 keywfs bos.net.tcp.client 7.1.3.0 7.1.3.47...
AIX 7.2 TL 1 : bellmail (IV91011) (deprecated)
https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...
AIX 6.1 TL 9 : bellmail (IV91006) (deprecated)
https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...
AIX 7.1 TL 3 : bellmail (IV91007) (deprecated)
https://vulners.com/cve/CVE-2016-8972 https://vulners.com/cve/CVE-2016-8972 IBM AIX could allow a local user to gain root privileges using a specially crafted command within the bellmail client. This plugin has been deprecated to better accommodate iFix supersedence with replacement plugin...
openSUSE Security Update : gnuchess (openSUSE-2016-1352)
This update for gnuchess fixes a security issue : - CVE-2015-8972: specially crafted user input may have caused gnuchess to crash boo1010143 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
Updated gnuchess packages fix security vulnerability
gnuchess before 6.2.4 is vulnerable to a stack buffer overflow related to user move input, where 160 characters of input can crash gnuchess CVE-2015-8972...
CVE-2015-8972
Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...