151 matches found
CVE-2015-0512
Open redirect vulnerability (CVE-2015-0512) in EMC Unisphere Central prior to 4.0. Affected component: Unisphere Central web interface. Description: an unvalidated redirect parameter could send users to arbitrary external sites, enabling phishing by manipulation of the URL. CVSSv2 base score 5.8 ...
ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-002: Unisphere Central Security Update for Multiple Vulnerabilities EMC Identifier: ESA-2015-002 CVE Identifier: CVE-2013-1899, CVE-2013-1900, CVE-2013-1901, CVE-2013-1902, CVE-2012-5885, CVE-2011-3389, CVE-2013-1767, CVE-2012-2137,...
VUPEN Security Research - Adobe Acrobat & Reader XI-X "AcroBroker" Sandbox Bypass (Pwn2Own)
VUPEN Security Research - Adobe Acrobat & Reader XI-X "AcroBroker" Sandbox Bypass Pwn2Own Website : http://www.vupen.com Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- Adobe Acrobat and Reader are the global standards for electronic document sharing. They are used to creat...
Adobe Reader < 10.1.10 / 11.0.07 Multiple Vulnerabilities (APSB14-15) (Mac OS X)
The version of Adobe Reader installed on the remote host is a version prior to 10.1.10 or 11.0.07. It is, therefore, affected by multiple vulnerabilities : - A heap overflow condition exists that allows an attacker to execute arbitrary code. CVE-2014-0511 - A security bypass vulnerability exists...
Adobe Reader绕过PDF沙盒保护机制漏洞
CVECAN ID: CVE-2014-0512 Adobe Reader也被称为Acrobat Reader是美国Adobe公司开发的一款优秀的PDF文档阅读软件。 Adobe Reader 11.0.06版本在PDF沙盒保护机制的实现上存在安全漏洞，可使攻击者利用此漏洞绕过安全限制。 0 Adobe Reader 11.0.06 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.adobe.com/support/security/...
CVE-2014-0512
Adobe Reader 11.0.06 allows attackers to bypass a PDF sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014...
CVE-2014-0512
Affected products/versions: Adobe Acrobat/Reader XI 11.0.06 and earlier; XI 11.0.06 specifically cited; prior 10.1.9 and earlier as per the VUPEN advisory. Vulnerability class and root cause: An input validation error in the AcroBroker.exe component when processing local file paths could be explo...
Adobe Reader Multiple Vulnerabilities - 01 (Apr 2014) - Windows
Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...
Oracle Linux 6 : httpd (ELSA-2013-0512)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0512 advisory. - add security fix for CVE-2012-2687 850794 - add security fixes for CVE-2011-4317, CVE-2012-0053, CVE-2012-0031, CVE-2011-3607 787599 Tenable has...
CentOS Update for httpd CESA-2013:0512 centos6
Check for the Version of httpd OpenVAS Vulnerability Test CentOS Update for httpd CESA-2013:0512 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
RedHat Update for httpd RHSA-2013:0512-02
Check for the Version of httpd OpenVAS Vulnerability Test RedHat Update for httpd RHSA-2013:0512-02 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
CVE-2012-0512
CVE-2012-0512 is a SQL Injection vulnerability in Oracle Enterprise Manager components (Database Control 11.1.0.7, 11.2.0.2 and Grid Control 10.2.0.4/earlier) related to the compareWizFirstConfig page. The flaw allows remote, authenticated attackers to execute SQL with SYSMAN privileges via the f...
SQL Injection in Oracle Enterprise Manager (compareWizFirstConfig web page) (CVE-2012-0512)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppSecInc Team SHATTER Security Advisory SQL Injection in Oracle Enterprise Manager compareWizFirstConfig web page. Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 11.1.0.7, 11.2.0.2 and previous patchsets Oracle...
Oracle Enterprise Manager SQL injection Vulnerability
Exploit for jsp platform in category web applications -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppSecInc Team SHATTER Security Advisory SQL Injection in Oracle Enterprise Manager compareWizFirstConfig web page. Risk Level: High Affected versions: Oracle Enterprise Manager Database Control...
Oracle Enterprise Manager compareWizFirstConfig SQL injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppSecInc Team SHATTER Security Advisory SQL Injection in Oracle Enterprise Manager compareWizFirstConfig web page. Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 11.1.0.7, 11.2.0.2 and previous patchsets Oracle...
Cisco IOS Locally Defined User Enumeration
It is possible to enumerate all locally defined users, which are used for authentication, on a Cisco IOS device if aaa new-model is not used. TRUSTED...
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6331)
This update of acroread fixes the following vulnerabilities : - stack overflow that could lead to code execution. CVE-2009-1855 - integer overflow with potential to lead to arbitrary code execution. CVE-2009-1856 - memory corruption with potential to lead to arbitrary code execution. CVE-2009-185...
SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 6398)
This update of acroread fixes the following vulnerabilities : - stack overflow that could lead to code execution. CVE-2009-1855 - integer overflow with potential to lead to arbitrary code execution. CVE-2009-1856 - memory corruption with potential to lead to arbitrary code execution. CVE-2009-185...
CVE-2011-0512
SQL injection vulnerability in team.php in the Teams Structure module 3.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the teamid parameter...
CVE-2011-0512
PHP-Fusion's Teams Structure Module (version 3.0) contains a SQL injection in team.php via the team_id parameter. This vulnerability allows remote attackers to execute arbitrary SQL commands. The CVE entry (CVE-2011-0512) is supported by multiple sources (NVD/OpenVAS) with a base CVSS v2 score of...