Design/Logic Flaw

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2016-1048

CVE-2016-1048 is a use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X. It allows attackers to execute arbitrary code via unspecifie...

Ubuntu: Security Advisory (USN-1765-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1765-1: Apache HTTP Server vulnerabilities

Niels Heinen discovered that multiple modules incorrectly sanitized certain strings, which could result in browsers becoming vulnerable to cross-site scripting attacks when processing the output. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a...

CVE-2013-1048

The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid before 2.2.22-13 for the Apache HTTP Server on Debian GNU/Linux does not properly create the /var/lock/apache2 lock directory, which allows local users to gain privileges via an...

CVE-2013-1048

The CVE-2013-1048 entry concerns the Debian Apache HTTP Server: the apache2ctl script fails to properly create the /var/lock/apache2 directory in affected builds (squeeze < 2.2.16-6+squeeze11, wheezy < 2.2.22-13, sid

CVE-2013-1048

The Debian apache2ctl script in the apache2 package squeeze before 2.2.16-6+squeeze11, wheezy before 2.2.22-13, and sid before 2.2.22-13 for the Apache HTTP Server on Debian GNU/Linux does not properly create the /var/lock/apache2 lock directory, which allows local users to gain privileges via an...

Debian DSA-2637-1 : apache2 - several issues

Several vulnerabilities have been found in the Apache HTTPD server. - CVE-2012-3499 The modules modinfo, modstatus, modimagemap, modldap, and modproxyftp did not properly escape hostnames and URIs in HTML output, causing cross site scripting vulnerabilities. - CVE-2012-4558 Modproxybalancer did n...

[SECURITY] [DSA 2637-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2637-1 [email protected] http://www.debian.org/security/ Stefan Fritsch March 04, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2637-1 (apache2 - several issues)

Several vulnerabilities have been found in the Apache HTTPD server. CVE-2012-3499 The modules modinfo, modstatus, modimagemap, modldap, and modproxyftp did not properly escape hostnames and URIs in HTML output, causing cross site scripting vulnerabilities. CVE-2012-4558 Modproxybalancer did not...

CVE-2012-1048

CVE-2012-1048 describes a cross-site scripting (XSS) vulnerability in the web admin page: communityplusplus/www/administrator.php of the eFront Community++ edition (version 3.6.10, and possibly other editions). The issue allows remote attackers to inject arbitrary web script or HTML via the filte...

CVE-2012-1048

creationtimestamp| type| source ---|---|--- 2012-02-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36668...

CVE-2011-1048

CVE-2011-1048 is a SQL injection vulnerability reported in MihanTools 1.33, affecting product.php via the id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. Documented in multiple sources (NVD, Red Hat, CVE listings) consistently describe the issue as a SQL...

CVE-2011-1048

creationtimestamp| type| source ---|---|--- 2011-02-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16143...

CVE-2010-1048

CVE-2010-1048 describes a Cross-site Scripting (XSS) vulnerability in the Uiga Business Portal, specifically in the blog/index.php page. The issue is exploitable through the textcomment parameter (the Comment Box) in a noentryid action, enabling remote attackers to inject arbitrary web script or ...

CVE-2010-1048

creationtimestamp| type| source ---|---|--- 2010-02-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11357...

Internet Explorer Malformed GIF File Double Free (MS04-025; CVE-2003-1048)

The Graphics Interchange Format GIF defines a file format intended for the on-line transmission and interchange of raster graphic data. It uses the LZW compression algorithm to minimize file sizes. A double free vulnerability exists in the way Microsoft Internet Explorer handles images of the GIF...

SuSE 11 Security Update : openswan (SAT Patch Number 1048)

Two vulnerabilities in the openswan ASN.1 parser when handling RDNs, UTCTIME and GENERALIZEDTIME strings could lead to remote crashes of the pluto daemon. CVE-2009-2185 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Authentication Bypass of Snom Phone Web Interface

COMPASS SECURITY ADVISORY http://www.csnc.ch/en/downloads/advisories.html Product: Snom VoIP/SIP Phones Snom300, Snom320, Snom360, Snom370, Snom820 Vendor: snom technology AG CVD ID: CVE-2009-1048 Subject: Authentication Bypass of Snom Phone Web Interface Risk: High Effect: Remote Author: Walter...

CVE-2008-1048

The CVE-2008-1048 entry describes a Cross-site scripting (XSS) vulnerability in Plume CMS 1.2.2, specifically in manager/xmedia.php where the dir parameter can be exploited to inject arbitrary web script or HTML. Affected software: Plume CMS 1.2.2 (component: manager/xmedia.php). Underlying cause...