Adobe Reader Multiple Vulnerabilities - 01 (May 2015) - Mac OS X

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Adobe Reader < 10.1.14 / 11.0.11 Multiple Vulnerabilities (APSB15-10)

The version of Adobe Reader installed on the remote host is a version prior to 10.1.14 / 11.0.11. It is, therefore, affected by the following vulnerabilities : - A buffer overflow condition exists in CoolType.dll due to improper validation of user-supplied input. A remote attacker can exploit thi...

Design/Logic Flaw

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064,...

CVE-2015-3061

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064, CVE-2015-3065,...

CVE-2015-3061

Technical details (affected software, root cause, impact, patches) are not publicly available in the provided documents beyond the general CVE description. Monitor for updates.

Debian DSA-3061-1 : icedove - security update

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client: Multiple memory safety errors, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code or denial of service. This update...

CVE-2014-3061

IBM Emptoris Spend Analysis is affected by a CSRF vulnerability (CVE-2014-3061) in 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4. The issue allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. Root cause is ...

openSUSE Security Update : chromium (openSUSE-SU-2012:0492-1)

Security update for Chromium and V8 to 18.0.1025.142. Following bugs are listed in the Chrome changelog : - $500 109574 Medium CVE-2011-3058: Bad interaction possibly leading to XSS in EUC-JP. Credit to Masato Kinugawa. - $500 112317 Medium CVE-2011-3059: Out-of-bounds read in SVG text handling...

CVE-2013-3061

The CVE-2013-3061 vulnerability affects SAP’s Healthcare Industry Solution: IS-H Hospital ISHMED-PATRED_TRANSACT_RFCCALL in both the IS-H component and the SAP ERP central component (ECC 6). The issue is a privilege escalation that lets remote authenticated users bypass transaction restrictions v...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. VID b8f0a391-7910-11e1-8a43-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID b8f0a391-7910-11e1-8a43-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2011-3061

Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might allow man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate...

CVE-2011-3061

Google Chrome up to 18.0.1025.142 is affected by CVE-2011-3061 due to improper verification of X.509 certificates before using a SPDY proxy, which could enable MITM or leakage of sensitive information via a crafted certificate. Root cause: SPDY proxy certificate checking error. Mitigation, per th...

Google Chrome 18.0.1025.142之前版本多个内存破坏漏洞

BUGTRAQ ID: 52762 CVE ID: CVE-2011-3058,CVE-2011-3059,CVE-2011-3060,CVE-2011-3061,CVE-2011-3062,CVE-2011-3063,CVE-2011-3064,CVE-2011-3065 Google Chrome是由Google开发的一款设计简单、高效的Web浏览工具。 Google Chrome 18.0.1025.142之前版本在实现上存在多个安全漏洞，攻击者可利用这些漏洞执行任意代码、绕过安全限制、执行跨站脚本执行攻击。 0 Google Chrome 18.0.1025.142 厂商补丁：...

CVE-2010-3061

IBM Tivoli Storage Manager (TSM) FastBack Mount service is affected by CVE-2010-3061. The vulnerability lies in the message-protocol implementation of the Mount service in FastBack 5.x.x before 5.5.7 and in 6.1.0.0, allowing remote attackers to cause a denial of service (recovery failure) and pot...

CVE-2007-3061

creationtimestamp| type| source ---|---|--- 2009-12-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10686...

CVE-2009-3061

The CVE-2009-3061 entry concerns a SQL injection in lesson.php of Alqatari Q R Script 1.0, exploitable via the id parameter to execute arbitrary SQL commands. Affected component: lesson.php in Alqatari Q R Script 1.0; root cause is improper input handling allowing SQL command injection. Public re...

Fedora Update for nagios-plugins FEDORA-2008-3061

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2008-3061

CVE-2008-3061: Open redirect vulnerability in redirect.php of V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary sites via the to parameter, enabling phishing. Root cause: open redirect due to insufficient redirection validation. No patch/mitigation details are provided in the...

SuSE 10 Security Update : inkscape (ZYPP Patch Number 3061)

Several format string problems where fixed in inkscape. - A format string vulnerability in Inkscape allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a URI, which is not properly handled by certain dialogs. CVE-2007-1463 - Format string vulnerability ...

CVE-2007-3061

CVE-2007-3061 affects Cactushop 6 and earlier. The issue is improper access control that allows remote attackers to download sensitive data by requesting web-root stored databases (cactushop6.mdb or cactushop5.mdb). The description specifies direct access to these .mdb files as the attack vector....