CVE-2016-0940

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2016-0940

Adobe Acrobat/Reader exposure CVE-2016-0940 is a use-after-free memory corruption vulnerability affecting Adobe Reader and Acrobat prior to 11.0.14, Acrobat/Reader DC Classic prior to 15.006.30119, and Acrobat/Reader DC Continuous prior to 15.010.20056 on Windows and macOS. The issue is triggered...

Adobe Reader < 15.006.30119 / 15.010.20056 Multiple Vulnerabilities (APSB16-02)

The version of Adobe Reader installed on the remote Windows host is a version prior to 15.006.30119 or 15.010.20056. It is, therefore, affected by multiple vulnerabilities. - Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acroba...

Oracle: Security Advisory (ELSA-2007-0940)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-0940

CVE-2014-0940 affects IBM Tivoli Service Automation Manager 7.2.2.2 and earlier, with XSS vulnerabilities exploitable via the REST API or the Self Service UI. The CVSSv2 base score is 4.3 (Medium), with network attack vector, no confidentiality impact, partial integrity impact, and no availabilit...

Oracle Linux 5 : Important:kernel (ELSA-2007-0940)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0940 advisory. 2.6.18-8.1.15.0.1.el5 - Fix bonding primary=ethX Bert Barbe IT 101532 ORA 5136660 - Add entropy module option to e1000/bnx2 John Sobecki ORA 6045759...

ESA-2013-028: EMC NetWorker Elevation of Privilege Vulnerability

ESA-2013-028.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-028: EMC NetWorker Elevation of Privilege Vulnerability EMC Identifier: ESA-2013-028 EMC Identifier: NW147983 CVE Identifier: CVE-2013- 0940 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected product...

CVE-2013-0940

Summary: CVE-2013-0940 affects the EMC NetWorker client’s nsrpush process. Affected versions: before 7.6.5.3 and 8.x before 8.0.1.4. Root cause: the nsrpush process sets weak permissions on unspecified files, enabling local privilege escalation (via unspecified/unknown vectors). Impact (as stated...

Apache mod_include Buffer Overflow (CVE-2004-0940)

Apache HTTP server is the most widely deployed web server on the Internet. Apache HTTP server is capable of running on a Microsoft Windows and wide variety of Unix-like platforms. A vulnerability exists in the Apache web server's Server Side Includes SSI functionality. A specially crafted file ca...

CVE-2010-0940

CVE-2010-0940 is a cross-site scripting (XSS) vulnerability in Simple PHP Guestbook 1.0, exploitable via the action parameter in guestbook.php. The affected component is the guestbook submission page; the root cause is reflected/script injection in user-provided input. Expected impact, as stated ...

SLES9: Security update for apache

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache modssl For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5014050 within t...

SLES9: Security update for apache

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache modssl For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5014050 within t...

CVE-2009-0940

The CVE-2009-0940 entry describes multiple CSRF vulnerabilities in the HP Embedded Web Server (EWS) used by HP LaserJet printers, Edgeline printers, and Digital Senders. The vulnerabilities allow an attacker to hijack a user’s intranet connectivity to perform requests such as (1) printing documen...

Gentoo Security Advisory GLSA 200411-03 (apache)

The remote host is missing updates announced in advisory GLSA 200411-03. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0940

Plain Black WebGUI is affected by a cross-site scripting (XSS) vulnerability present in versions before 7.4.24, which can allow remote attackers to inject arbitrary script or HTML when creating a username. The issue is independently identified from CVE-2007-0407. Mitigation: upgrade to WebGUI 7.4...

CVE-2008-0940

Cross-site scripting XSS vulnerability in Plain Black WebGUI before 7.4.24 allows remote attackers to inject arbitrary web script or HTML when creating a username, a different vulnerability than CVE-2007-0407...

Microsoft CAPICOM Certificates ActiveX Control Code Execution (MS07-028; CVE-2007-0940)

CAPICOM Certificates CAPICOM.dll is an ActiveX control that provides a method for encrypting data based on secure underlying Windows CryptoAPI functionality.A remote code execution vulnerability has been reported in Cryptographic API Component Object Model CAPICOM Certificates.A remote attacker...

CVE-2007-0940

CVE-2007-0940 describes a remote code execution vulnerability in the CAPICOM Certificates ActiveX control (CAPICOM.dll) used by Microsoft CAPICOM and BizTalk Server 2004 SP1/SP2. The flaw arises from how CAPICOM.Certificates validates inputs, enabling an attacker who entices a user to visit a cra...

EV0087.txt

New eVuln Advisory: ShoutLIVE PHP Code Execution & Multiple XSS Vulnerabilities http://evuln.com/vulns/87/summary.html --------------------Summary---------------- eVuln ID: EV0087 CVE: CVE-2006-0940 CVE-2006-0941 Software: ShoutLIVE Sowtware's Web Site:...

CVE-2006-0940

Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary PHP code via variables that are written to settings.php...