113 matches found
CVE-2016-1065
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...
CVE-2016-1056
CVE-2016-1056 is a use-after-free in Adobe Reader/Acrobat prior to 11.0.16, Acrobat/Reader DC Classic prior to 15.006.30172, and DC Continuous prior to 15.016.20039. Affects Windows and macOS; vectors are unspecified. Base impact is arbitrary code execution. Patches are available in the stated fi...
OracleVM 3.2 : xen (OVMSA-2015-0068) (POODLE) (Venom)
The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2015-0068 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...
CVE-2015-1056
Cross-site scripting XSS vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages...
CVE-2015-1056
The CVE-2015-1056 entry describes a cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printers, exploitable through the web interface (e.g., general/status.html) via the url parameter. Affected firmware is before version L; the root cause is improper handling/validation of URL param...
Joomla Component com_rokdownloads Local File Inclusion (CVE-2010-1056)
A file inclusion vulnerability has been reported in Joomla Com Rokdownloads. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Steinberg MyMp3PRO v5.0 SEH Buffer Overflow
Exploit for windows platform in category local exploits !/usr/bin/ruby Vendor: http://cjcity.ru/soft/35-8.html Software link: http://cjcity.ru/2/downloader.php?id=00000000559 print ''' Steinberg MyMp3PRO v5.0 SEH Buffer Overflow Version: 5.0 Build 5.1.0.21 Date found: 04.12.2013 Exploit Author:...
CVE-2013-1056
X.org X server 1.13.3 and earlier, when not run as root, allows local users to cause a denial of service crash or possibly gain privileges via vectors involving cached xkb files...
CVE-2013-1056
Affected software: X.Org X Server (Xorg) 1.13.3 and earlier. Vulnerability arises from issues with cached xkb files, allowing a local user to crash the server or potentially gain privileges (local, no root required). Underlying cause is tied to handling of X Keyboard (xkb) caches. Impact stated a...
Ubuntu: Security Advisory (USN-1990-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-1990-1: X.Org X server vulnerabilities
Pedro Ribeiro discovered that the X.Org X server incorrectly handled memory operations when handling ImageText requests. An attacker could use this issue to cause X.Org to crash, or to possibly execute arbitrary code. CVE-2013-4396 It was discovered that non-root X.Org X servers such as Xephyr...
CVE-2012-1056
The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for 1 Recent forwards, 2 Most forwarded, or 3 Dynamic blocks, which allows remote attackers to obtain node titles via unspecified vectors...
CVE-2012-1056
CVE-2012-1056 concerns the Drupal Forward module (6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3). The issue is improper permission checks for the Recent forwards, Most forwarded, and Dynamic blocks, enabling remote attackers to obtain node titles via unspecified vectors. The related Drupal S...
CVE-2012-1056
The Forward module 6.x-1.x before 6.x-1.21 and 7.x-1.x before 7.x-1.3 for Drupal does not properly enforce permissions for 1 Recent forwards, 2 Most forwarded, or 3 Dynamic blocks, which allows remote attackers to obtain node titles via unspecified vectors...
Metasploit Framework Local Privilege Escalation Vulnerability
This host is installed with Metasploit Framework and is prone to local privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodmetasploitframeworklocprevesclvulnwin.nasl 7015 2017-08-28 11:51:24Z teissa $ Metasploit Framework Local Privilege Escalation Vulnerability Authors: Ant...
CVE-2011-1056
The installer for Metasploit Framework 3.5.1, when running on Windows, uses weak inherited permissions for the Metasploit installation directory, which allows local users to gain privileges by replacing critical files with a Trojan horse...
CVE-2011-1056
Metasploit Framework Local Privilege Escalation (CVE-2011-1056): on Windows, the Metasploit installer uses weak inherited permissions for the installation directory, enabling local users to replace critical files with a Trojan horse and gain privileges. Based on NVD/OpenVAS records, this is a loc...
Ubuntu: Security Advisory (USN-1056-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-1056
Joomla! component com_rokdownloads (RokDownloads) prior to version 1.0.1 is affected by a directory traversal (Local File Inclusion) vulnerability. An attacker can abuse a .. in the controller parameter to index.php to include and potentially execute arbitrary local files. The Nuclei template con...
CVE-2010-1056
Directory traversal vulnerability in the RokDownloads comrokdownloads component before 1.0.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...