65 matches found
Apple iTunes < 12.9.1 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209197 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
Apple iTunes < 12.9.1 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209197 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
Apple iTunes Multiple Vulnerabilities (HT209197) - Windows
Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...
CVE-2017-4374
CVE-2017-4374 is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-4374
CVE-2016-4374 affects HPE Release Control (RC) 9.13, 9.20, and 9.21 prior to 9.21.0005 p4. The issue allows remote authenticated users to perform server-side request forgery (SSRF) and potentially disclose information or cause a DoS via unspecified vectors. No exploitation details are provided in...
CVE-2015-4374
Cross-site scripting XSS vulnerability in the Webform module before 6.x-3.23, 7.x-3.x before 7.x-3.23, and 7.x-4.x before 7.x-4.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a component name in the recipient To address of an ema...
CVE-2015-4374
CVE-2015-4374 describes a cross-site scripting (XSS) vulnerability in the Drupal Webform module. The issue allows remote authenticated users with certain permissions to inject arbitrary script/HTML via a component name in the recipient (To) address used for emails sent by Webform. Affected are Dr...
CVE-2015-4374
Cross-site scripting XSS vulnerability in the Webform module before 6.x-3.23, 7.x-3.x before 7.x-3.23, and 7.x-4.x before 7.x-4.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a component name in the recipient To address of an ema...
Adobe Reader Integer Overflow Vulnerability (Jan 2012) - Linux
Adobe Reader is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...
CVE-2011-4374
Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors...
CVE-2011-4374
Adobe Reader for Linux (9.x) contains an integer overflow in versions prior to 9.4.6 that could allow arbitrary code execution via unspecified vectors. The vulnerability is CVE-2011-4374. Connected advisories indicate a fix to 9.4.6 available via APSB11-24 (Adobe), and Red Hat RHSA-2011:1434 docu...
RHEL 6 : acroread (RHSA-2011:1434)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1434 advisory. Adobe Reader allows users to view and print documents in Portable Document Format PDF. This update fixes multiple security flaws in Adobe...
Winamp Multiple Vulnerabilities
This host is installed with Winamp and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwinampmultvuln.nasl 5388 2017-02-21 15:13:30Z teissa $ Winamp Multiple Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net Th...
Winamp < 5.6 Multiple Vulnerabilities
The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.6. Such versions are potentially affected by the following vulnerabilities : - An integer overflow vulnerability exists in the 'innsv.dll' plugin when parsing the...
CVE-2009-4374
CVE-2009-4374 describes a directory traversal vulnerability in AlienVault Open Source Security Information Management (OSSIM) 2.1.5, and possibly earlier versions before 2.1.5-4. The flaw occurs in repository/repository_attachment.php, where an attacker can upload files into arbitrary directories...
CVE-2008-4374
CVE-2008-4374 describes an SQL injection in CMS Buzz: index.php vulnerable to manipulation of the id parameter in the playgame action, enabling remote SQL command execution. The issue is due to improper input handling in the affected PHP file, with CVSS v2 indicating High severity (base score 7.5...
CVE-2008-4374
creationtimestamp| type| source ---|---|--- 2008-09-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6408...
Microsoft Visual Studio MaskedEdit ActiveX buffer overflow
Added: 09/03/2008 CVE: CVE-2008-3704 BID: 30674 OSVDB: 47475 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow in the MaskedEdit ActiveX control allows command execution when a user loads a web page which...