Solaris 10 (sparc) : 151355-01

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: CPU performance counters CPC drivers. Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability c...

Solaris 10 (x86) : 150401-13

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: CPU performance counters CPC drivers. Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability c...

Stack overflow

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. Authentication is not required to exploit this vulnerability. The specific flaw exists within nvwsworker.exe. When parsing the boundary header of a multipart reques...

CVE-2018-1161

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. Authentication is not required to exploit this vulnerability. The specific flaw exists within nvwsworker.exe. When parsing the boundary header of a multipart reques...

CVE-2018-1161

Summary of findings : CVE-2018-1161 affects Quest NetVault Backup 11.2.0.13, with a vulnerability in the nvwsworker.exe component. The flaw occurs when parsing the boundary header of a multipart request, where the process fails to validate the length of user-supplied data before copying it to a s...

rst.ua XSS vulnerability

Vulnerable URL: http://rst.ua////oldcars/?task=newresults=%0060308'-alert/XSSposed/-'%2f%2f678=0=0=0=0=0=0=0=0=0==sform Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4215 VIP website status:| Yes Coordinated...

Foswiki Topic Settings Remote Privilege Escalation Vulnerability

Foswiki is prone to a remote privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:foswiki:foswiki"...

Adobe Reader and Acrobat Security Bypass (APSB16-26 : CVE-2016-4215)

This vulnerability is an instance of same-origin policy violation. An attacker can exploit this vulnerability by enticing a user to open a maliciously crafted PDF file. Successful exploitation can trick embedded JavaScript code to run in the wrong context, potentially leading to a security bypass...

CVE-2016-4215

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to bypass JavaScript API execution restrictions via unspecified vectors...

CVE-2016-4215

CVE-2016-4215 affects Adobe Reader and Acrobat products on Windows and macOS, enabling bypass of JavaScript API execution restrictions. Affected are: Reader/Acrobat before 11.0.17, DC Classic before 15.006.30198, and DC Continuous before 15.017.20050. The Vector(s) are unspecified in the provided...

Adobe Acrobat < 11.0.17 / 15.006.30198 / 15.017.20050 Multiple Vulnerabilities (APSB16-26) (Mac OS X)

The version of Adobe Acrobat installed on the remote Mac OS X host is prior to 11.0.17, 15.006.30198, or 15.017.20050. It is, therefore, affected by multiple vulnerabilities : - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. An...

Oracle: Security Advisory (ELSA-2012-1483)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-4215

Cisco WLC IPv6 packet handling vulnerability (CVE-2015-4215) affects Cisco Wireless LAN Controller devices running software 7.5(102.0) and 7.6(1.62). The issue arises when forwarding IPv6 packets to a device not configured for IPv6, causing an unhandled exception that can crash the device. This i...

Oracle Solaris Critical Patch Update : jul2014_SRU11_1_17_5_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: CPU performance counters CPC drivers. Supported versions that are affected are 10 and 11.1. Easily exploitable...

CVE-2014-4215

CVE-2014-4215 affects Oracle Solaris 10 and 11.1, involving CPU performance counter (CPC) drivers. The vulnerability is local and can cause an OS hang or crash (DOS) via CPC driver handling, as described by the CVE entry and corroborating Solaris patch advisories. Connected sources indicate affec...

CVE-2013-4215

The IPXPINGCOMMAND in contrib/checkipxping.c in Nagios Plugins 1.4.16 allows local users to gain privileges via a symlink attack on /tmp/ipxping/ipxping...

CVE-2013-4215

CVE-2013-4215 affects Nagios Plugins 1.4.16; the IPXPING_COMMAND in contrib/check_ipxping.c allows local users to gain privileges via a symlink race on /tmp/ipxping/ipxping. Root cause is a symlink attack enabling local privilege escalation. Exploitation status and fix details are not provided in...

Fedora Update for drupal7-views FEDORA-2013-4215

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 8381)

Mozilla Firefox has been updated to the 10.0.11 ESR security release, which fixes various bugs and security issues. - Security researcher miaubiz used the Address Sanitizer tool to discover a series critically rated of use-after-free, buffer overflow, and memory corruption issues in shipped...

Mozilla Thunderbird Multiple Vulnerabilities-01 (Nov 2012) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...