86 matches found
PT-2019-12511 · Synology · Synology Moments
Name of the Vulnerable Software and Affected Versions: Synology Moments versions prior to 1.3.0-0691 Description: The issue concerns a relative path traversal vulnerability. It allows remote authenticated users to upload arbitrary files via the name parameter. Recommendations: For versions prior ...
CVE-2018-0691
Multiple +Message Apps Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to version 1.1.23, NTT DOCOMO +Message App for Android prior to version 42.40.2800, NTT DOCOMO +Message App for iOS prior to version 1.1.23, KDDI +Message App for Android prior to...
CVE-2018-0691
The CVE-2018-0691 entry covers multiple +Message Apps from SoftBank, NTT DOCOMO, and KDDI that fail to verify SSL server certificates in Android/iOS apps (SoftBank +Message App versions before 10.1.7 and 1.1.23; NTT DOCOMO before 42.40.2800 and 1.1.23; KDDI before 1.0.6 and 1.1.23). Root cause: l...
CVE-2014-0691
CVE-2014-0691 affects Cisco WebEx Meetings Server prior to version 1.1. The vulnerability arises from meeting IDs with insufficient entropy, enabling remote attackers to bypass authentication and join arbitrary meetings without a password. Exploitation details are not provided beyond this descrip...
CVE-2017-0691
CVE-2017-0691 is a denial-of-service vulnerability in the Android media framework affecting Android 7.0, 7.1.1 and 7.1.2 (Android ID A-36724453). The NVD CVSS data lists a medium severity (CVSSv2: 4.3; AV:N/AC:M/Au:N/I:N/C:N/A:P) and a CVSSv3 score of 5.5 (LOCAL, UI required, high availability im...
CVE-2017-0691
A denial of service vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36724453...
Design/Logic Flaw
Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect integrity via unknown vectors, a different vulnerability than CVE-2016-0691...
CVE-2016-0691
Oracle Database Server, RDBMS Security component (versions 11.2.0.4, 12.1.0.1, 12.1.0.2) is affected by CVE-2016-0691, a local vulnerability that can allow an unprivileged or low-privilege local user to compromise integrity via unknown vectors. The provided documents confirm the component and aff...
CVE-2015-0691
CVE-2015-0691 concerns Cisco Secure Desktop (CSD) Cache Cleaner, where a Cisco-signed Java Archive (JAR) in the Cache Cleaner component could allow an unauthenticated, remote attacker to execute arbitrary commands via a crafted web site (Bug CSCup83001). The issue: code execution via the signed J...
CA20121001-01: Security Notice for CA License
CA20121001-01: Security Notice for CA License Issued: October 01, 2012 CA Technologies Support is alerting customers to two potential risks in CA License also known as CA Licensing. Vulnerabilities exist that can allow a local attacker to execute arbitrary commands or gain elevated access. CA...
CVE-2012-0691
CVE-2012-0691 affects CA License (CA Licensing) before 1.90.03. The root cause is insecure use of system commands, enabling a local unprivileged user to execute commands with elevated privileges. The Security Notice provides patches and upgrade guidance to CA License 1.90.04 (or 1.90.03+ for non-...
CVE-2010-0691
SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter...
CVE-2010-0691
SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter...
CVE-2010-0691
creationtimestamp| type| source ---|---|--- 2010-02-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11445...
SLES9: Security update for qt3
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: qt3 qt3-non-mt For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5018833 within...
CVE-2009-0691
CVE-2009-0691 affects Foxit Reader 3.0 before Build 1817 with the JPEG2000/JBIG Decoder add-on prior to version 2.0.2009.616. A fatal error in decoding a JPX header can be triggered by a crafted PDF to cause memory corruption and a crash (DoS) and may enable arbitrary code execution. The vulnerab...
Foxit Reader JPEG2000 / JBIG Decoder Add-On < 2.0.2009.616 Multiple Vulnerabilities
The Foxit Reader application installed on the remote Windows host includes an optional JPEG2000 / JBIG Decoder add-on that is prior to version 2.0.2009.616. It is, therefore affected by multiple vulnerabilities : - A out-of-bounds read error exists in the add-on due to improper handling of a...
Gentoo Security Advisory GLSA 200408-20 (Qt)
The remote host is missing updates announced in advisory GLSA 200408-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD Ports: qt
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...