7566 matches found
The vulnerability of the Adobe Photoshop graphic editor and the Adobe Bridge file manager allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Adobe Photoshop graphic editor and the Adobe Bridge file manager arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption remotely...
The vulnerability of the Adobe Photoshop graphic editor and the Adobe Bridge file manager allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Adobe Photoshop graphic editor and the Adobe Bridge file manager arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption remotely...
openssl security update
CentOS Errata and Security Advisory CESA-2016:0301 Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...
OpenSSL: Side channel attack on modular exponentiation
A side-channel attack was found that makes use of cache-bank conflicts on the Intel Sandy-Bridge microarchitecture. An attacker who has the ability to control code in a thread running on the same hyper-threaded core as the victim's thread that is performing decryption, could use this flaw to...
Important: Red Hat Security Advisory: openssl security update
Updated openssl packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
CVE-2016-0702
The MODEXPCTIMECOPYFROMPREBUF function in crypto/bn/bnexp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the...
UBUNTU-CVE-2016-0702
The MODEXPCTIMECOPYFROMPREBUF function in crypto/bn/bnexp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular exponentiation, which makes it easier for local users to discover RSA keys by running a crafted application on the...
Vulnerability in OpenSSL - Side channel attack on modular exponentiation
A side-channel attack was found which makes use of cache-bank conflicts on the Intel Sandy-Bridge microarchitecture which could lead to the recovery of RSA keys. The ability to exploit this issue is limited as it relies on an attacker who has control of code in a thread running on the same...
Commands Generated by XenMobile Wizard on Netscaler - SSL Bridge
This was created for customers that need to run the wizard more than once for multiple XenMobile environments...
webSPELL 4.2.4 Cross Site Request Forgery / SQL Injection
Advisory ID: HTB23291 Product: webSPELL Vendor: webSPELL.org Vulnerable Versions: 4.2.4 and probably prior Tested Version: 4.2.4 Advisory Publication: January 22, 2016 without technical details Vendor Notification: January 22, 2016 Vendor Patch: February 12, 2016 Public Disclosure: February 17,...
osCmax 2.5.4 Code Execution / CSRF / Local File Inclusion
Advisory ID: HTB23285 Product: osCmax Vendor: http://oscmax.com/ Vulnerable Versions: 2.5.4 and probably prior Tested Version: 2.5.4 Advisory Publication: December 21, 2015 without technical details Vendor Notification: December 21, 2015 Public Disclosure: February 17, 2016 Vulnerability Type: PH...
WeBid 1.1.2P2 SQL Injection
Advisory ID: HTB23292 Product: WeBid Vendor: WeBid Vulnerable Versions: 1.1.2P2 and probably prior Tested Version: 1.1.2P2 Advisory Publication: January 22, 2016 without technical details Vendor Notification: January 22, 2016 Vendor Patch: February 4, 2016 Public Disclosure: February 17, 2016...
osCommerce 2.3.4 Local File Inclusion / Cross Site Request Forgery
Advisory ID: HTB23284 Product: osCommerce Vendor: osCommerce Vulnerable Versions: 2.3.4 and probably prior Tested Version: 2.3.4 Advisory Publication: December 21, 2015 without technical details Vendor Notification: December 21, 2015 Public Disclosure: February 17, 2016 Vulnerability Type: PHP Fi...
CVE-2016-1333
Cisco IOS 15.53M and 15.61T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service device reload via an SNMP request for unspecified BRIDGE MIB OIDs, aka Bug ID CSCux89878...
Design/Logic Flaw
Cisco IOS 15.53M and 15.61T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service device reload via an SNMP request for unspecified BRIDGE MIB OIDs, aka Bug ID CSCux89878...
Cisco 1000 Series Connected Grid Routers SNMP BRIDGE MIB Denial of Service Vulnerability
A vulnerability in the Simple Network Management Protocol SNMP BRIDGE Management Information Base MIB of the Cisco 1000 Series Connected Grid Routers could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a faulty implementation of...
Adobe Bridge CC Multiple Vulnerabilities (Feb 2016)
Adobe Bridge CC is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:bridgecc";...
Adobe Bridge CC Version Detection
Detects the installed version of Adobe bridge cc on Windows. The script logs in via smb, searches for adobe in the registry, gets the Adobe bridge cc installation path from registry and fetches version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a...
Adobe Bridge CC < 6.2 Multiple Memory Corruption Vulnerabilities (APSB16-03)
The version of Adobe Bridge installed on the remote Windows host is prior to 6.2. It is, therefore, affected by multiple unspecified memory corruption issues due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit these issues to execute arbitrary code. ...