117 matches found
CVE-2016-6944
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...
Oracle: Security Advisory (ELSA-2012-1091)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-1091
CVE-2015-1091 affects the CFNetwork Session component in Apple iOS < 8.3 and Apple OS X
RedHat Update for mod_wsgi RHSA-2014:1091-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-5160
Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 request. NOTE: the vendor reportedly asserts that this behavi...
Directory traversal
Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 request. NOTE: the vendor reportedly asserts that this behavi...
CVE-2014-5160
HP Data Protector’s Cell Request Service crs.exe is affected by two directory traversal vulnerabilities (opcode 1091 and 305). The flaws allow remote, unauthenticated attackers to write or delete arbitrary files, with potential code execution in the service context. Affected component is crs.exe ...
PT-2014-6308 · Hewlett Packard · Hp Data Protector
Name of the Vulnerable Software and Affected Versions: HP Data Protector affected versions not specified Description: The issue allows remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 request. The vendor reportedly assert...
openSUSE Security Update : finch (openSUSE-SU-2012:0066-1)
Remote users could crash pidgin via ICQ, SILC, XMPP and Yahoo protocols CVE-2011-4601, CVE-2011-4603, CVE-2011-4602, CVE-2011-1091. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update finch-5557...
openSUSE Security Update : finch (openSUSE-SU-2012:0066-1)
Remote users could crash pidgin via ICQ, SILC, XMPP and Yahoo protocols CVE-2011-4601, CVE-2011-4603, CVE-2011-4602, CVE-2011-1091. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update finch-5557...
WordPress Quick Page/Post Redirect Plugin 5.0.3 CSRF / XSS
Details ================ Software: Quick Page/Post Redirect Plugin Version: 5.0.3 Homepage: http://wordpress.org/plugins/quick-pagepost-redirect-plugin/ Advisory ID: dxw-1970-1091 CVE: CVE-2014-2598 CVSS: 6.8 Medium; AV:N/AC:M/Au:N/C:P/I:P/A:P Description ================ CSRF and stored XSS in...
Oracle Linux 6 : nss, / nspr, / and / nss-util (ELSA-2012-1091)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1091 advisory. nspr 4.9.1-2 - Related: rhbz833762 - Update License to MPLv2.0 4.9.1-1 - Resolves: rhbz833762 - Update to NSPR491RTM nss 3.13.5-1.0.1.el63 - Added...
Oracle Linux 4 : pidgin (ELSA-2011-1371)
From Red Hat Security Advisory 2011:1371 : Updated pidgin packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...
Novell iPrint Client IPP Response URI handling buffer overflow
Added: 07/05/2013 CVE: CVE-2013-1091 BID: 59612 OSVDB: 92938 Background Novell iPrint is an application which allows users to install and manage printers. Novell iPrint installs the Novell iPrint Control ActiveX control named ienipp.ocx. Problem A buffer overflow vulnerability within the handling...
Hewlett-Packard Data Protector Cell Manager crs.exe Opcode 1091 Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within crs.exe which listens by default on a random TCP port. When parsing opcode 1091, the...
Novell iPrint Client < 5.90 Stack-Based Buffer Overflow
The version of Novell iPrint Client installed on the remote host is earlier than 5.90. It therefore is reportedly affected by an unspecified, remote, stack-based buffer overflow vulnerability that could allow arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if...
CVE-2013-1091
CVE-2013-1091 affects Novell iPrint Client for Windows, with a stack-based buffer overflow in the handling of URI parameters in IPP responses prior to version 5.90. The root cause is insufficient validation of received URI data, enabling remote code execution when a user loads a crafted page (no ...
Scientific Linux Security Update : pidgin on SL4.x, SL5.x i386/x86_64
Pidgin is an instant messaging program which can log in to multiple accounts on multiple instant messaging networks simultaneously. An input sanitization flaw was found in the way the Pidgin SILC Secure Internet Live Conferencing protocol plug-in escaped certain UTF-8 characters. A remote attacke...
RedHat Update for pidgin RHSA-2011:0616-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2012-1091
CVE-2012-1091 is a reservation duplicate of CVE-2012-1410. Connected sources confirm CVE-2012-1410 details: multiple cross-site scripting (XSS) vulnerabilities in the History Window implementation of Kadu versions 0.9.0 through 0.11.0, allowing remote injection of arbitrary web script or HTML via...