81 matches found
CVE-2018-0525
The CVE-2018-0525 issue applies to Jubatus 1.0.2 and earlier, caused by a directory traversal vulnerability that allows remote attackers to read arbitrary files via unspecified vectors. Impact is exposure of file contents on affected servers. Public references from multiple sources (e.g., JVN/OSV...
JVN#56132776: Multiple vulnerabilities in Jubatus
Jubatus provided by Jubatus Community contains multiple vulnerabilities listed below. Arbitrary code execution - CVE-2018-0524 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L| Base Score: 5.6 CVSS v2| AV:N/AC:M/Au:N/C:P/I:P/A:P| Base Score: 6.8 Directory...
CVE-2017-0525
CVE-2017-0525 is an elevation-of-privilege issue in the Qualcomm IPA driver on Android, enabling a local attacker to execute code in kernel context. Affected: Android devices using Kernel-3.10 or Kernel-3.18 with the Qualcomm IPA driver. Impact per sources: local privilege escalation requiring pr...
CVE-2016-0525
Technical details about CVE-2016-0525 are not publicly available in the provided connected documents. Monitor for updates from official advisories to obtain affected products, impact, and fixes.
Oracle: Security Advisory (ELSA-2013-0525)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-040: EMC Secure Remote Services Virtual Edition Security Update for Multiple Vulnerabilities CVE Identifier: CVE-2015-0235, CVE-2015-0524, CVE-2015-0525 Severity Rating: CVSSv2 Base Score: See below for individual scores for each CVE Affected...
CVE-2015-0525
The Gateway Provisioning service in EMC Secure Remote Services Virtual Edition ESRS VE 3.02 and 3.03 allows remote attackers to execute arbitrary OS commands via unspecified vectors...
CVE-2015-0525
The ESRS VE Gateway Provisioning service in EMC Secure Remote Services Virtual Edition (versions 3.02 and 3.03) contains a command injection flaw that could allow an unauthenticated remote attacker to execute arbitrary OS commands. The vulnerability is tied to the Gateway Provisioning component; ...
Adobe Reader Multiple Vulnerabilities - 01 (May 2014) - Windows
Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...
CVE-2014-0525
CVE-2014-0525 : Adobe Reader and Acrobat (Windows/macOS) are affected. The flaw is in the API handling unmapped memory in versions 10.x prior to 10.1.10 and 11.x prior to 11.0.07, enabling arbitrary code execution via unspecified API calls. The issue is documented by Adobe in APSB14-15; remediati...
Adobe Reader < 10.1.10 / 11.0.07 Multiple Vulnerabilities (APSB14-15) (Mac OS X)
The version of Adobe Reader installed on the remote host is a version prior to 10.1.10 or 11.0.07. It is, therefore, affected by multiple vulnerabilities : - A heap overflow condition exists that allows an attacker to execute arbitrary code. CVE-2014-0511 - A security bypass vulnerability exists...
CVE-2013-0525
CVE-2013-0525 concerns multiple XSS vulnerabilities in IBM iNotes 8.5.x that allow local users to inject arbitrary web script or HTML via a shared mail file (SPR DKEN8PDNTX). Affected product: IBM iNotes 8.5.x. Root cause: cross-site scripting in the web UI via shared mail files. Impact as stated...
RedHat Update for pcsc-lite RHSA-2013:0525-02
Check for the Version of pcsc-lite OpenVAS Vulnerability Test RedHat Update for pcsc-lite RHSA-2013:0525-02 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
CVE-2012-0525
CVE-2012-0525 affects Oracle Enterprise Manager Base Platform in Oracle Database Server 11.1.0.7, 11.2.0.2, 11.2.0.3 and Oracle Enterprise Manager Grid Control 10.2.0.5 and 11.1.0.1. Connected documentation confirms a SQL Injection vulnerability in the Enterprise Manager web app (searchPage: /em/...
SQL Injection in Oracle Enterprise Manager (searchPage web page) (CVE-2012-0525)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppSecInc Team SHATTER Security Advisory SQL Injection in Oracle Enterprise Manager searchPage web page. Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 11.1.0.7, 11.2.0.3 and previous patchsets Oracle Enterprise Manager...
Oracle Enterprise Manager searchPage SQL Injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 AppSecInc Team SHATTER Security Advisory SQL Injection in Oracle Enterprise Manager searchPage web page. Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 11.1.0.7, 11.2.0.3 and previous patchsets Oracle Enterprise Manager...
SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure
The version of SunSSH running on the remote host has an information disclosure vulnerability. A design flaw in the SSH specification could allow a man-in-the-middle attacker to recover up to 32 bits of plaintext from an SSH-protected connection in the standard configuration. An attacker could...
CVE-2009-0525
CVE-2009-0525 concerns an XSS vulnerability in the sajax_get_common_js function of php/Sajax.php in Sajax 0.12. The issue arises when user-supplied input via the URL parameter is not properly handled, enabling remote attackers to inject arbitrary web script or HTML, particularly in browsers that ...
Gentoo Security Advisory GLSA 200504-15 (PHP)
The remote host is missing updates announced in advisory GLSA 200504-15. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
CVE-2008-0525
CVE-2008-0525 affects PatchLink Update client for Unix (used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac LUM 6.2094–6.4102 and related products). The root cause is local symlink abuse in scripts that use temporary files: /tmp/patchlink.tmp (logtrimmer) can be truncated, an...