103 matches found
CVE-2015-3354
Cross-site request forgery CSRF vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that delete wishlist purchase intentions via unspecified vectors...
CVE-2015-3354
The CVE-2015-3354 entry concerns the Drupal Wishlist module (versions 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7). The vulnerability is a CSRF flaw that allows remote attackers to hijack the authentication of arbitrary users to perform actions deleting wishlist purchase intentions via unsp...
CVE-2015-3354
Cross-site request forgery CSRF vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that delete wishlist purchase intentions via unspecified vectors...
CVE-2014-3354
CVE-2014-3354 affects Cisco IOS/IOS XE RSVP handling. Affected: Cisco IOS 12.0, 12.2, 12.4, 15.0–15.3 and IOS XE 2.x/3.x before 3.7.4S; 3.2.xSE/3.3.xSE before 3.3.2SE; 3.3.xSG/3.4.xSG before 3.4.4SG; 3.8.xS–3.10.xS before 3.10.1S. Error: parsing malformed RSVP packets can trigger a remote DoS wit...
Adobe Acrobat and Reader Buffer Overflow (APSB13-22: CVE-2013-3354; CVE-2016-0944)
A buffer overflow vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Adobe Reader Multiple Unspecified Vulnerabilities-01 (Sep 2013) - Windows
Adobe Reader is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2013-3352
Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-3354 and CVE-2013-3355...
Memory corruption
Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-3352 and CVE-2013-3354...
Memory corruption
Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-3354 and CVE-2013-3355...
CVE-2013-3354
Adobe Reader and Acrobat are affected on Windows and macOS by a memory corruption vulnerability in which parsing a corrupted PDF file can lead to remote code execution. Affected products are before 10.1.8 and 11.x prior to 11.0.04. Root cause: incorrect memory buffer allocation during PDF parsing...
Adobe Acrobat < 11.0.4 / 10.1.8 Multiple Vulnerabilities (APSB13-22)
The version of Adobe Acrobat installed on the remote host is earlier than 11.0.4 / 10.1.8. It is, therefore, affected by multiple vulnerabilities : - An unspecified stack overflow issue exists that could lead to code execution. CVE-2013-3351 - Unspecified memory corruption vulnerabilities exist...
CVE-2012-3354
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message...
CVE-2012-3354
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message...
CVE-2012-3354
DokuWiki (Dokuwiki) vulnerability CVE-2012-3354 affects the dokuwiki component used in Fedora 16–18. When PHP error reporting is enabled, the prefix parameter can trigger a full path disclosure via an error message, exposing installation paths. Root cause: the sanitization of HTTP POST value for ...
CVE-2012-3354
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message...
CVE-2012-3354
doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive information via the prefix parameter, which reveals the installation path in an error message...
Fedora Update for dokuwiki FEDORA-2012-16605
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 18 : dokuwiki-0-0.14.20121013.fc18 (2012-16550)
upgrade to latest upstream Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenab...
Fedora Update for quassel FEDORA-2011-12569
Check for the Version of quassel OpenVAS Vulnerability Test Fedora Update for quassel FEDORA-2011-12569 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for quassel FEDORA-2011-12569
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...