CVE-2016-4154

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083...

CVE-2016-4154

CVE-2016-4154 is a memory-corruption vulnerability in Adobe Flash Player (used in Flash libraries in IE11/Edge) linked to ShimContentResolver.resolve() with resolverType=0. Root cause: improper validation leading to a memory crash, enabling potential arbitrary code execution. Affected: Adobe Flas...

CVE-2014-4154

ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the PPPoE/PPPoA password via a direct request for basic/tc2wanfun.js...

CVE-2014-4154

The CVE-2014-4154 entry concerns the ZTE ZXV10 W300 router (firmware W300V1.0.0a_ZRD_LK). The issue is improper access control that stores sensitive information under the web root, enabling remote attackers to retrieve the PPPoE/PPPoA password via a direct request to basic/tc2wanfun.js. The docum...

ZTE WXV10 W300 Disclosure / CSRF / Default

Exploit Title: ZTE WXV10 W300 Multiple Vulnerabilities Date: 17-05-2014 Server Version: RomPager/4.07 UPnP/1.0 Tested Routers: ZTE ZXV10 W300 Firmware: W300V1.0.0aZRDLK ADSL Firmware: FwVer:3.11.2.175TC3086 HwVer:T14.F75.0 Tested on: Kali Linux x8664 Exploit Author: Osanda Malith Jayathissa...

openSUSE Security Update : clamav (openSUSE-SU-2011:0208-1)

Specially crafted VBA data in Microsoft Office documents could crash clamav or potentially even cause execution of arbitrary code. clamav was updated to version 0.97 to fix the issue CVE-2011-1003. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

CVE-2013-4154

The qemuAgentCommand function in libvirt before 1.1.1, when a guest agent is not configured, allows remote attackers to cause a denial of service NULL pointer dereference and crash via vectors related to "agent based cpu unplug," as demonstrated by the "virsh vcpucount foobar --guest" command...

CVE-2013-4154

The CVE-2013-4154 entry concerns libvirt’s qemuAgentCommand path. Affected component: libvirt prior to 1.1.1. When a guest agent is not configured, remote attackers can trigger a NULL pointer dereference via agent based CPU (un)plug vectors (as demonstrated by virsh vcpucount foobar --guest), cau...

Security fix for the ALT Linux 8 package libvirt version 1.1.1-alt1

Aug. 8, 2013 Alexey Shabalin 1.1.1-alt1 - 1.1.1 - fixed CVE-2013-2230, CVE-2013-4153, CVE-2013-4154...

Adobe Acrobat Multiple Vulnerabilities - Windows

This host is installed with Adobe Acrobats and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeacrobatmultvulnaug12win.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Acrobat Multiple Vulnerabilities - Windows Authors: Thanga Prakash S Copyright: Copyright c 2013...

Adobe Reader < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16) (Mac OS X)

The version of Adobe Reader installed on the remote Mac OS X host is prior to 10.1.4 or 9.5.2. It is, therefore, affected by the following vulnerabilities : - An unspecified stack-based buffer overflow condition exists that allows an attacker to execute arbitrary code. CVE-2012-2049 - An...

Adobe Acrobat < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16)

The version of Adobe Acrobat installed on the remote host is earlier than 10.1.4 / 9.5.2 and is, therefore, affected by multiple vulnerabilities : - An unspecified stack-based buffer overflow error exists. CVE-2012-2049 - An unspecified buffer overflow error exists. CVE-2012-2050 - Numerous...

Memory corruption

Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149,...

CVE-2012-4154

Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149,...

CVE-2012-4154

Technical details for CVE-2012-4154 are not publicly available in the provided documents; monitor for updates.

CVE-2010-4154

CVE-2010-4154 affects FTP Voyager (Rhino Software) up to version 15.2.0.11 and earlier. The root cause is improper sanitization of downloaded filenames, allowing a remote FTP server to craft a filename containing directory traversal sequences (e.g., ......). This can enable writing arbitrary file...

KLA10154 WLF vulnerability in FTP Voyager

Directory traversal vulnerability was found in the FTP Voyager. By using this vulnerability spiteful abuser can erite arbitrary files. This vulnerability can be exploited from remote via specially designed filename. Original advisories test results Related products FTP-Voyager CVE list...

CVE-2009-4154

The CVE-2009-4154 entry concerns a directory traversal in Elxis CMS, triggered by .. in the filename parameter of includes/feedcreator.class.php, allowing remote attackers to read arbitrary files. The connected documents confirm the vulnerable component and path, but do not provide patch versions...

Gentoo Security Advisory GLSA 200610-12 (mod_tcl)

The remote host is missing updates announced in advisory GLSA 200610-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200610-12 (mod_tcl)

The remote host is missing updates announced in advisory GLSA 200610-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...