Adobe Reader < 10.1.14 / 11.0.11 Multiple Vulnerabilities (APSB15-10)

The version of Adobe Reader installed on the remote host is a version prior to 10.1.14 / 11.0.11. It is, therefore, affected by the following vulnerabilities : - A buffer overflow condition exists in CoolType.dll due to improper validation of user-supplied input. A remote attacker can exploit thi...

CVE-2015-3057

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2014-9161, CVE-2015-3046, CVE-2015-3049, CVE-2015-3050,...

Memory corruption

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2014-9161, CVE-2015-3046, CVE-2015-3049, CVE-2015-3050,...

Memory corruption

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2014-9161, CVE-2015-3046, CVE-2015-3050, CVE-2015-3051,...

CVE-2015-3057

CVE-2015-3057 is a memory corruption vulnerability in Adobe Acrobat/Reader (10.x up to 10.1.14 and 11.x up to 11.0.11 on Windows and macOS) exploited by parsing a malicious PDF containing JavaScript. The connected advisories (APSB15-10 series) link this CVE to similar PDF-loading memory corruptio...

CVE-2014-3057

The CVE-2014-3057 entry affects IBM WebSphere Portal 7.x and 8.x (up to 8.0.0.1 CF12) via the Unified Task List (UTL) Portlet. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML through a crafted URL. Exploitation details, af...

CVE-2013-3057

CVE-2013-3057 is a Joomla! core information disclosure vulnerability. Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allow remote authenticated users to bypass privilege requirements and list privileges of arbitrary users via unspecified vectors due to inadequate permission checking. The conn...

CVE-2013-3057

Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and list the privileges of arbitrary users via unspecified vectors...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. VID 330106da-7406-11e1-a1d7-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID 330106da-7406-11e1-a1d7-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. VID b8f0a391-7910-11e1-8a43-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID b8f0a391-7910-11e1-8a43-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Gentoo Security Advisory GLSA 201203-19 (chromium)

The remote host is missing updates announced in advisory GLSA 201203-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201203-19 (chromium)

The remote host is missing updates announced in advisory GLSA 201203-19. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2011-3057

CVE-2011-3057 affects Google Chrome's V8 engine (Chromium) and is described as an invalid read in V8, with the initial entry noting a remote denial of service vector. Connected documents corroborate that this CVE is among a set of Chromium/V8 issues (e.g., CVEs 2011-3057 through 2011-3065) tracke...

CVE-2009-3057

CVE-2009-3057 affects AOM Software Beex 3. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via the navaction parameter to the vulnerable pages (1) news.php and (2) partneralle.php). The connected documents specify t...

CVE-2009-3057

creationtimestamp| type| source ---|---|--- 2009-09-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34470 2009-09-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34471...

CVE-2008-3057

The CVE-2008-3057 entry concerns Octeth Oempro 3.5.5.1 (and possibly versions before 4). The underlying issue is that the PHPSESSID cookie is not marked Secure in HTTPS sessions, which allows an attacker to capture the cookie by intercepting its transmission over HTTP. The available documents con...

Immunity Canvas: XOOPS_ICONTENT

Name| xoopsicontent ---|--- CVE| CVE-2007-3057 Exploit Pack| CANVAS Description| Xoops Icontent Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Xoops CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3057 CVE Name: CVE-2007-3057...

CVE-2007-3057

Technical details about CVE-2007-3057 are not publicly available in the provided documents. Monitor for updates.

CVE-2006-3057

CVE-2006-3057 affects the NetworkManager DHCP daemon (dhcdbd). The issue is a denial of service caused by certain invalid DHCP responses that trigger memory corruption. The description is explicit about the component and impact, but no specific versions or remediation are provided in the connecte...