CVE-2017-8959

An Authentication Bypass vulnerability in HPE MSA 1040 and HPE MSA 2040 SAN Storage in version GL220P008 and earlier and was found...

CVE-2017-8959

Affected products: HPE MSA 1040 and HPE MSA 2040 SAN Storage. Vulnerability: Authentication bypass vulnerability in version GL220P008 and earlier. Root cause: bypassing authentication could allow unauthorized access. Impact (as described in sources): Elevation of privileges / partial to high impa...

Debian: Security Advisory (DLA-1040-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1040-1 : resiprocate security update

CVE-2017-11521 The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections. For Debian 7 'Wheezy', these problems have been fixed in version...

TP-LINK TDDP - Multiple Vulnerabilities

Exploit for hardware platform in category dos / poc 1. Advisory Information Title: TP-LINK TDDP Multiple Vulnerabilities Advisory ID: CORE-2016-0007 Advisory URL: http://www.coresecurity.com/advisories/tp-link-tddp-multiple-vulnerabilities Date published: 2016-11-21 Date of last update: 2016-11-1...

Adobe Acrobat and Reader Security Bypass (APSB16-14 : CVE-2016-1040)

A remote code execution vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe Reader handles certain API functions, that could lead to bypass restrictions. A remote attacker can exploit this issue by enticing a target user to open a specially crafted PDF file...

Adobe Reader Security Updates (APSB16-14) - Windows

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Code injection

Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors, a different vulnerabili...

CVE-2016-1040

Adobe Reader and Acrobat affected: versions prior to 11.0.16, 15.006.30172, or 15.016.20039 (Windows and macOS) are vulnerable to bypassing JavaScript API execution restrictions via unspecified vectors. This is a different vulnerability than CVE-2016-1038/1039/1041/1042/1044/1062/1117. Severity i...

CVE-2015-1040

Summary (CVE-2015-1040): Multiple XSS vulnerabilities in the administrative backend of BEdita 3.4.0 allow remote authenticated users to inject arbitrary script/HTML via several fields (lrealname in editProfile; data[title] or data[description] in addQuickItem; note text in saveNote; titleBEObject...

Apple iTunes < 11.1.4 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 11.1.4. It is, therefore, affected by multiple vulnerabilities : - The included versions of the WebKit, libxml, and libxslt components in iTunes contain several errors that can lead to memory corruption and arbitrary code executio...

Apple iTunes < 11.1.4 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 11.1.4. It is, therefore, potentially affected by several issues : - The included versions of WebKit, libxml, and libxslt contain several errors that could lead to memory corruption and possibly arbitrary code executio...

Mandrake Linux Security Advisory : ypserv (MDKSA-2000:064)

A format string parsing bug exists in ypbind 3.3 if it is run in debug mode which leaks file descriptors under certain circumstances which can lead to a DoS. In addition, ypbind may suffer from buffer overflows. In the ypserv program, a buffer overflow and format bug exist if the build system doe...

CVE-2010-1040

OpenPNE contains an authentication bypass vulnerability related to the IP address range limitation function when mobile device support is enabled. The flaw in the IP address range limitation may allow remote attackers to bypass the simple login feature, potentially enabling access to or modificat...

WinAsm Studio Buffer Overflow Vulnerability

This host is running WinAsm Studio and is prone to Heap Overflow Vulnerability. OpenVAS Vulnerability Test $Id: secpodwinasmstudiowapbofvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ WinAsm Studio Buffer Overflow Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 SecPod, http://www.secpod.co...

CVE-2009-1040

CVE-2009-1040 affects WinAsm Studio 5.1.5.0 and is described in OpenVAS/NVD as a buffer/heap overflow that allows user-assisted remote attackers to execute arbitrary code via a crafted project (.wap) file. The OpenVAS entry explicitly labels it as a heap overflow vulnerability. The NVD entry prov...

CVE-2009-1040

creationtimestamp| type| source ---|---|--- 2009-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8224...

CVE-2008-1040

The CVE-2008-1040 issue affects Fujitsu Interstage products: Interstage Application Server (versions 8.0.0–8.0.3 and 9.0.0), Interstage Studio (8.0.1 and 9.0.0), and Interstage Apworks 8.0.0. It is a buffer overflow in the Single Sign-On function caused by improper URI handling, which enables a r...

Debian: Security Advisory (DSA-1040-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1040-1 (gdm)

The remote host is missing an update to gdm announced via advisory DSA 1040-1. A vulnerability has been identified in gdm, a display manager for X, that could allow a local attacker to gain elevated privileges by exploiting a race condition in the handling of the .ICEauthority file. The old stabl...