CVE-2017-2974

Adobe Digital Editions (Windows/macOS) prior to 4.5.4 is affected by a buffer over-read leading to information disclosure (CVE-2017-2974). Affected product/version: 4.5.3 and earlier. Root cause per sources: exploitable overflow/over-read vulnerability in the 4.5.3 and earlier builds. Impact stat...

CentOS Update for gstreamer-plugins-bad-free CESA-2016:2974 centos6

Check the version of gstreamer-plugins-bad-free SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : gstreamer-plugins-bad-free (ELSA-2016-2974)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2974 advisory. 0.10.19-5 - vmncdec: Sanity-check width/height before using it Resolves: rhbz1400820 0.10.19-4 - Remove insecure NSF decoder Resolves: rhbz1400820...

Oracle: Security Advisory (ELSA-2009-0444)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2974

LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML documents via vectors involving a crafted image file...

CVE-2015-2974

Gazou BBS plus (LEMON-S PHP) prior to version 2.36 is affected by a vulnerability in file upload processing that allows remote attackers to upload arbitrary HTML documents via specially crafted image files. Exploitation details are consistent across multiple sources (CNVD/NVD/JVN). The impact is ...

CVE-2015-2974

LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML documents via vectors involving a crafted image file...

CVE-2014-2974

Cross-site request forgery CSRF vulnerability in php/useraccount.php in Silver Peak VX through 6.2.4 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2014-2974

Cross-site request forgery CSRF vulnerability in php/useraccount.php in Silver Peak VX through 6.2.4 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2014-2974

The CVE-2014-2974 issue affects Silver Peak VX prior to a fixed release. A CSRF in /php/user_account.php allows an unauthenticated user to cause administrative accounts to be created, enabling an attacker to hijack administrator sessions/privileges. Affected product: Silver Peak VX (versions up t...

Silver Peak VX is vulnerable to cross-site request forgery and cross-site scripting

Overview Silver Peak VX version 6.2.2.047968 is vulnerable to cross-site request forgery and cross-site scripting. Description CWE-352: Cross-Site Request Forgery CSRF - CVE-2014-2974Silver Peak VX version 6.2.2.047968 contains a cross-site request forgery vulnerability in /php/useraccount.php...

Debian DSA-2974-1 : php5 - security update

Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2014-0207 Francisco Alonso of the Red Hat Security Response Team reported an...

CVE-2013-2974

The CVE describes a bypass of authorization in IBM Tivoli Application Dependency Discovery Manager (TADDM) via the BIRT viewer. Affected software: TADDM 7.2.1.x prior to 7.2.1.5 (including 7.2.1.0–7.2.1.4). Root cause: incorrect authorization checks in the BIRT reporting URL allow crafted paramet...

Oracle Linux 5 : giflib (ELSA-2009-0444)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0444 advisory. 4.1.3-7.1.el53.1 - cve-2005-3350, cve-2005-2974 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Scientific Linux Security Update : giflib on SL5.x i386/x86_64

Several flaws were discovered in the way giflib decodes GIF images. An attacker could create a carefully crafted GIF image that could cause an application using giflib to crash or, possibly, execute arbitrary code when opened by a victim. CVE-2005-2974, CVE-2005-3350 All running applications usin...

CVE-2012-2974

The CVE-2012-2974 vulnerability affects the SMC Networks SMC8024L2 switch web interface. An unauthenticated, remote attacker can bypass login by requesting a direct URL to a .html file under one of these paths: status/, system/, ports/, trunks/, vlans/, qos/, rstp/, dot1x/, security/, igmps/, or ...

SMC SMC8024L2 switch web interface authentication bypass

Overview The SMC8024L2 switch does not require authentication for the web interface configuration pages if they are visited with a direct URL. Description The SMC8024L2 switch does not require authentication for the web interface configuration pages if they are visited with a direct URL. An...

CentOS Update for giflib CESA-2009:0444 centos5 i386

Check for the Version of giflib OpenVAS Vulnerability Test CentOS Update for giflib CESA-2009:0444 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CentOS Update for giflib CESA-2009:0444 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-2974

The CVE-2010-2974 issue is a stack-based buffer overflow in the IConfigurationAccess interface of the Wonderware ArchestrA ConfigurationAccessComponent ActiveX control used by Wonderware Application Server (WAS) and related IDE/IEE. Affected software runs prior to 3.1 SP2 P01. An attacker can sup...