330 matches found
CVE-2013-2050
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/cfmemanageiqevmpassreset.rb 2025-02-06 03:13:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:14+00:00|...
Design/Logic Flaw
axTLS version 1.5.3 has a coding error in the ASN.1 parser resulting in the year 1950 of UTCTime being misinterpreted as 2050...
CVE-2016-2050
The getabbrevarrayinfo function in libdwarf-20151114 allows remote attackers to cause a denial of service out-of-bounds write via a crafted elf file...
CVE-2016-2050
CVE-2016-2050 affects libdwarf-20151114 (get_abbrev_array_info). A crafted ELF file can trigger an out-of-bounds write, enabling remote denial of service. Debian/Dwarfutils advisory DLA-669-1 notes this alongside other related CVEs and states fixes in version 20120410-2+deb7u2 for Debian 7; other...
Fedora 24 : libdwarf (2016-f36c5935e5)
Update to 20160507 release - fixes many outstanding crash bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
CVE-2006-2050
SQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to execute arbitrary SQL commands via the az parameter...
D-Link DAP-1320 Rev Ax is vulnerable to a command injection
Overview The D-Link DAP-1320 Rev Ax firmware update mechanism contains a command injection vulnerability. Description CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' A remote unauthenticated attacker may execute commands on the device by taking...
CVE-2015-2050
CVE-2015-2050 affects D-Link DAP-1320 Rev Ax with firmware before 1.21b05. A remote attacker can execute arbitrary commands via unspecified vectors over the network (no authentication). Related sources cite a remote code execution/command injection vulnerability tied to the device’s firmware/upda...
Red Hat CloudForms Management Engine SQL Injection (CVE-2013-2050)
An SQL injection has been reported in Red Hat CloudForms Management Engine. The vulnerability is due to improper sanitization of in the "explorer" action of "miqpolicy" controller. A remote attacker can exploit this vulnerability via the profile parameter in an explorer action...
CVE-2013-2050
SQL injection vulnerability in the miqpolicy controller in Red Hat CloudForms 2.0 Management Engine CFME 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile parameter in an explorer action...
CVE-2013-2050
The CVE-2013-2050 issue is a SQL injection vulnerability in the miq_policy controller of Red Hat CloudForms Management Engine (CFME) 5.1 and older, and ManageIQ Enterprise Virtualization Manager 5.0 and older. The vulnerability leverages the explorer action via the profile[] parameter, allowing r...
Red Hat CloudForms Management Engine 5.1 miq_policy/explorer SQL Injection
This module exploits a SQL injection vulnerability in the "explorer" action of "miqpolicy" controller of the Red Hat CloudForms Management Engine 5.1 ManageIQ Enterprise Virtualization Manager 5.0 and earlier by changing the password of the target account to the specified password. Module Options...
Adobe Reader WKT String Buffer Overflow (APSB12-16; CVE-2012-2050)
A remote code execution vulnerability has been reported in Adobe Reader...
Adobe Acrobat Multiple Vulnerabilities - Windows
This host is installed with Adobe Acrobats and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeacrobatmultvulnaug12win.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Acrobat Multiple Vulnerabilities - Windows Authors: Thanga Prakash S Copyright: Copyright c 2013...
Adobe Acrobat < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16)
The version of Adobe Acrobat installed on the remote host is earlier than 10.1.4 / 9.5.2 and is, therefore, affected by multiple vulnerabilities : - An unspecified stack-based buffer overflow error exists. CVE-2012-2049 - An unspecified buffer overflow error exists. CVE-2012-2050 - Numerous...
Adobe Reader < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16) (Mac OS X)
The version of Adobe Reader installed on the remote Mac OS X host is prior to 10.1.4 or 9.5.2. It is, therefore, affected by the following vulnerabilities : - An unspecified stack-based buffer overflow condition exists that allows an attacker to execute arbitrary code. CVE-2012-2049 - An...
CVE-2012-2050
Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors...
