CVE-2015-4438

Adobe Reader and Acrobat on Windows and macOS are affected by CVE-2015-4438 in versions: 10.x before 10.1.15 and 11.x before 11.0.12; Acrobat/Reader DC Classic before 2015.006.30060; Acrobat/Reader DC Continuous before 2015.008.20082. The issue bypasses JavaScript API execution restrictions via u...

KLA10628 Multiple vulnerabilities in Adobe Acrobat

Multiple serious vulnerabilities have been found in Adobe Acrobat. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1...

CVE-2014-4438

CVE-2014-4438: In Apple OS X before 10.10, a race condition in LoginWindow could let a physically proximate attacker gain access on an unattended workstation after screen locking was attempted. The issue was addressed by changing the order of operations in LoginWindow (remediation). The connected...

Solaris 9 (x86) : 127413-16

Message Queue 4.1 Update 4 Patch 6x86 SunOS 5.9 5.10 Core product. Date this patch was last updated by Sun : Mar/12/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 127411-16

Message Queue 4.1 Update 4 Patch 6 SunOS 5.9 5.10 Core product. Date this patch was last updated by Sun : Mar/12/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Fedora 20 : salt-0.17.1-1.fc20 (2013-19438)

Update to bugfix release 0.17.1. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

CVE-2013-4438

Salt aka SaltStack before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe...

CVE-2013-4438

SaltStack (Salt) before 0.17.1 is vulnerable to remote code execution via YAML loading with unspecified vectors. The issue is evidenced by multiple feeds: CVE-2013-4438 states that an attacker can execute arbitrary YAML code, with the vendor noting the YAML may already be safe. Public references ...

CVE-2013-4438

Removed by vendor...

Oracle Java GlassFish Server Privilege Escalation Vulnerability (Jan 2011)

GlassFish Server is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2010-4438

CVE-2010-4438 relates to a local privilege escalation in Oracle GlassFish Server (notably GlassFish 2.x/3.0.1 and JMS components). The OpenVAS entries confirm a GlassFish privilege-escalation vulnerability with CVSS base 5.7 (local access, partial confidentiality/integrity impact, complete availa...

CVE-2009-4438

The CVE-2009-4438 issue affects IBM DB2: Query Compiler/Rewrite/Optimizer in DB2 9.1 (before FP8), 9.5 (before FP5), and 9.7 (before FP1) fails to enforce privileges for accessing a (1) sequence or (2) global-variable object, enabling remote authenticated users to access data via unspecified vect...

IBM DB2 Self Tuning Memory Manager (STMM) DOS Vulnerability (Linux)

The host is installed with IBM DB2 and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodibmdb2stmmdosvulnlin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 Self Tuning Memory Manager STMM DOS Vulnerability Linux Authors: Antu Sanadi Updated By: Antu Sanadi on...

IBM DB2 Self Tuning Memory Manager (STMM) DOS Vulnerability (Windows)

The host is installed with IBM DB2 and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodibmdb2stmmdosvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 Self Tuning Memory Manager STMM DOS Vulnerability Windows Authors: Antu Sanadi Updated By: Antu Sanadi on...

CVE-2008-4438

CVE-2008-4438 affects Datafeed Studio 1.6.2, where a Cross-Site Scripting (XSS) flaw exists in search.php due to the q parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. The CVSS2 base score is 4.3 (Medium) with network attack vector, requiring no authent...

Gentoo Security Advisory GLSA 200710-13 (ampache)

The remote host is missing updates announced in advisory GLSA 200710-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200710-13 (ampache)

The remote host is missing updates announced in advisory GLSA 200710-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-4438

creationtimestamp| type| source ---|---|--- 2008-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32227...

AFP Server Detection

Binary data 4438.prm...

CVE-2007-4438

CVE-2007-4438 affects Ampache before 3.3.3.5. The vulnerability is a session-fixation flaw that allows remote attackers to hijack web sessions via unspecified vectors. Affected software is Ampache (web-based audio management) and the issue is documented across several sources including Gentoo GLS...