197 matches found
Oracle Solaris Critical Patch Update : oct2019_SRU11_4_13_4_0
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Systems component: SMF services & legacy daemons. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged...
CVE-2019-2961
CVE-2019-2961 affects Oracle Solaris 11, specifically the SMF services and legacy daemons component. The vulnerability can be exploited by a low-privilege, local attacker to perform unauthorized updates/inserts/deletes to Solaris data and cause partial denial of service (partial DOS). CVSS 3.0 ba...
CVE-2018-2961
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Easily exploitable vulnerability allows unauthenticated attacker with netwo...
CVE-2018-2961
CVE-2018-2961 affects Oracle Primavera P6 Enterprise Project Portfolio Management (P6 EPPM) Web Access. Web-access component vulnerabilities impact supported versions 8.4, 15.x, 16.x, and 17.x, allowing an unauthenticated attacker with network access via HTTP to compromise P6 EPPM. Attacks requir...
Adobe Acrobat and Reader Use After Free (APSB17-01: CVE-2017-2961)
A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...
Adobe Reader < 11.0.19 / 15.006.30279 / 15.023.20053 Multiple Vulnerabilities (APSB17-01) (macOS)
The version of Adobe Reader installed on the remote macOS or Mac OS X host is prior to 11.0.19, 15.006.30279, or 15.023.20053. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist due to improper validation of unspecified input. An unauthenticated,...
CVE-2017-2961
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the XFA engine, related to validation functionality. Successful exploitation could lead to arbitrary code execution...
CVE-2017-2961
CVE-2017-2961 is a use-after-free vulnerability in the XFA engine of Adobe Acrobat/Reader. It affects Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The issue is related to validation functionality, and exploitation could lead to arbitra...
CVE-2016-2961
The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote attackers to obtain sensitive Tomcat version information by sending a malformed POST request and then reading the Java stack trace...
CVE-2016-2961
The CVE-2016-2961 issue affects IBM Integration Bus and WebSphere Message Broker where an unauthenticated remote attacker can send a malformed HTTP POST to the integration server HTTP listener and read the Java stack trace to identify the running Tomcat version. Affected products and versions inc...
Ubuntu 14.04 LTS : Little CMS vulnerability (USN-2961-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2961-1 advisory. It was discovered that a double free could occur when the intent handling code in the Little CMS library detected an error. An attacker could use this to speciall...
CVE-2015-2961
Cross-site request forgery CSRF vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to hijack the authentication of administrators...
CVE-2015-2961
Cross-site request forgery CSRF vulnerability in Zoho NetFlow Analyzer build 10250 and earlier allows remote attackers to hijack the authentication of administrators...
CVE-2015-2961
CVE-2015-2961 is a CSRF vulnerability in Zoho NetFlow Analyzer, affecting build 10250 and earlier. An attacker could hijack administrator authentication by inducing a logged-in admin to perform unintended actions via a malicious page. The connected sources clearly state the impact and that the fi...
Debian DSA-2961-1 : php5 - security update
It was discovered that PHP, a general-purpose scripting language commonly used for web application development, is vulnerable to a heap-based buffer overflow in the DNS TXT record parsing. A malicious server or man-in-the-middle attacker could possibly use this flaw to execute arbitrary code as t...
Symantec Web Gateway ldap_latest.php Blind SQL Injection - Ver2 (CVE-2012-2961)
An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
Symantec Web Gateway ldap_latest.php Blind SQL Injection - Ver2 (CVE-2012-2961)
An SQL injection vulnerability has been reported in Symantec Web Gateway. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2013-2961
CVE-2013-2961 affects IBM Tivoli Monitoring (ITM) Basic Services, used in IBM Application Manager for Smart Business. The issue arises in the ITM Basic Services web server handling crafted HTTP traffic, allowing remote attackers to redirect HTTP requests and bypass proxy-server configuration. Aff...
CVE-2012-2961
The CVE-2012-2961 issue affects Symantec Web Gateway, specifically the management console. A SQL injection vulnerability in the gateway’s web interface (notably via search.php and related DB utilities) allowed remote, unauthenticated attackers to execute arbitrary SQL against the backend database...
