80 matches found
Synology Photo Station Cross-Site Scripting Vulnerability (CNVD-2018-07562)
Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet, and Log Viewer is one of the log viewers. A cross-site scripting vulnerability exists in Log Viewer in Synology Photo Station versions prior to 6.8.3-3463 and prior to 6.3-2971. A remote attack...
Synology Photo Station Input Validation Vulnerability
Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. An input validation vulnerability exists in SYNOPHOTOFlickrMultiUpload in Synology Photo Station versions prior to 6.8.3-3463 and 6.3-2971. A remote attacker can exploit the vulnerability to...
CVE-2016-2971
IBM Sametime Media Services 8.5.2 and 9.0 are affected by a vulnerability described in CVE-2016-2971 where sensitive information could be disclosed via stack trace error logs. This information disclosure weakness may inform future attacks. The vulnerability is documented across multiple sources (...
CVE-2011-2971
CVE-2011-2971 is rejected and not used as an active vulnerability entry.
Adobe Acrobat and Reader Heap Overflow (APSB17-01: CVE-2017-2971)
A code execution vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to heap overflow vulnerability in the JPEG decoder routine. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted JPEG file...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-2971. Reason: This candidate is a reservation duplicate of CVE-2017-2971. Notes: All CVE users should reference CVE-2017-2971 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2016-9041
CVE-2016-9041 is a reservation duplicate of CVE-2017-2971; CVE-2017-2971 describes an exploitable heap overflow in Adobe Acrobat Reader/Acrobat’s JPEG decoder, enabling arbitrary code execution on affected versions (15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier). No reme...
CVE-2017-2971
CVE-2017-2971 affects Adobe Acrobat Reader and Acrobat (Windows/macOS) with versions 15.020.20042 and earlier, 15.006.30244 and earlier, and 11.0.18 and earlier. The issue is an exploitable heap overflow in the JPEG decoder routine, which could allow arbitrary code execution on successful exploit...
Ubuntu 14.04 LTS : Linux kernel (Wily HWE) vulnerabilities (USN-2971-2)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2971-2 advisory. USN-2971-1 fixed vulnerabilities in the Linux kernel for Ubuntu 15.10. This update provides the corresponding updates for the Linux Hardware Enablement H...
Ubuntu: Security Advisory (USN-2971-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2971
CVE-2015-2971 affects Seeds acmailer: directory traversal vulnerability in acmailer prior to 3.8.18 and 3.9.x prior to 3.9.12 Beta. An authenticated remote attacker can delete arbitrary server files via a crafted string. The issue originates from improper file path handling in the affected compon...
CVE-2014-2971
Cross-site scripting XSS vulnerability in AddStdLetter.jsp in MicroPact iComplaints before 8.0.2.1.8.8014 allows remote authenticated users to inject arbitrary web script or HTML via the description parameter...
CVE-2014-2971
The CVE-2014-2971 issue is a Cross-Site Scripting (XSS) in MicroPact iComplaints’ AddStdLetter.jsp, exploitable by remote authenticated users via the description parameter. Affected version is iComplaints before 8.0.2.1.8.8014. The CERT/NVD entries describe potential script execution in the user’...
Debian DSA-2971-1 : dbus - security update
Several vulnerabilities have been discovered in dbus, an asynchronous inter-process communication system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2014-3477 Alban Crequy at Collabora Ltd. discovered that dbus-daemon sends an AccessDenied error to...
[SECURITY] [DSA 2971-1] dbus security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2971-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 02, 2014 http://www.debian.org/security/faq -...
CA ARCserve Backup Authentication Service Invalid Call Remote Code Execution (CVE-2012-2971)
An input validation vulnerability has been reported in the CA ARCserve Backup authentication service...
CA ARCserve Backup Remote Code Execution (CA20121018) (uncredentialed check)
Binary data arcservebackupcve-2012-2971.nbin...
CA ARCserve Backup Authentication service invalid virtual function call
Added: 11/09/2012 CVE: CVE-2012-2971 BID: 56116 OSVDB: 86416 Background CA ARCserve Backup formerly BrightStor ARCserve Backup is a backup and recovery solution. Problem An invalid virtual function call in the authentication service allows remote attackers to execute arbitrary commands. Resolutio...