81 matches found
CVE-2018-4880
CVE-2018-4880 affects Adobe Acrobat Reader/Acrobat versions: 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier. Root cause is a computation that reads data past the end of the target buffer within the U3D data parsing in the conversion module; this can lead to...
Adobe Reader <= 2015.006.30394 / 2017.011.30070 / 2018.009.20050 Multiple Vulnerabilities (APSB18-02)
The version of Adobe Reader installed on the remote Windows host is a version prior or equal to 2015.006.30394, 2017.011.30070, or 2018.009.20050. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the...
Adobe Acrobat < 2015.006.30416 / 2017.011.30078 / 2018.011.20035 Multiple Vulnerabilities (APSB18-02) (macOS)
The version of Adobe Acrobat installed on the remote macOS or Mac OS X host is a version prior to 2015.006.30416, 2017.011.30078, or 2018.011.20035. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the...
Adobe Acrobat < 2015.006.30413 / 2017.011.30078 / 2018.011.20035 Multiple Vulnerabilities (APSB18-02)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30413, 2017.011.30078, or 2018.011.20035. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...
Adobe Acrobat Reader DC (Continuous Track) Multiple Vulnerabilities (APSB18-02) - Windows
Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
KLA11193 Multiple vulnerabilities in Adobe Arcobat&Reader
Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code and gain priveleges. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities can be exploited to execute arbitrary...
CVE-2016-4880
CVE-2016-4880 is a stored cross-site scripting vulnerability in baserCMS environments, affecting baserCMS core (3.0.10 and earlier) and the Blog plugin (3.0.10 and earlier). The incident arises from insufficient input filtering, allowing an attacker with Administrative access to inject arbitrary ...
JVN#92765814: Multiple vulnerabilities in baserCMS
baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS and bundled plugins "Blog", "Mail", "Feed", and "Uploader" contain the following vulnerabilities. Cross-site request forgery CWE-352 - CVE-2016-4879, CVE-2016-4881, CVE-2016-4884, CVE-2016-4885,...
[SECURITY] Fedora 23 Update: pgpdump-0.31-1.fc23
pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP RFC 4880 and PGP version 2 RFC 1991...
[SECURITY] Fedora 22 Update: pgpdump-0.31-1.fc22
pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP RFC 4880 and PGP version 2 RFC 1991...
[SECURITY] Fedora 24 Update: pgpdump-0.31-1.fc24
pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP RFC 4880 and PGP version 2 RFC 1991...
[SECURITY] Fedora 23 Update: pgpdump-0.30-1.fc23
pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP RFC 4880 and PGP version 2 RFC 1991...
[SECURITY] Fedora 22 Update: pgpdump-0.30-1.fc22
pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP RFC 4880 and PGP version 2 RFC 1991...
[SECURITY] Fedora 24 Update: pgpdump-0.30-1.fc24
pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP RFC 4880 and PGP version 2 RFC 1991...
Design/Logic Flaw
Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server, a different vulnerability than CVE-2015-4880...
CVE-2015-4880
Oracle Fusion Middleware WebCenter Content (Content Server subcomponent) in version 10.1.3.5.1 is affected by CVE-2015-4880. The vulnerability is described as unspecified with remote impact to data integrity via unknown vectors, and is distinct from CVE-2015-4867. Connected sources summarize the ...
CVE-2014-4880
CVE-2014-4880 describes a buffer overflow in Hikvision DVR RTSP handling that enables remote code execution. The NVD entry notes a vulnerability in Hikvision DVR DS-7204 firmware (2.2.10 build 131009) and other models, exploitable via a long RTSP PLAY request with an oversized Authorization heade...
Remote Code Execution in Popular Hikvision Surveillance DVR
A number Hikvision digital video recorders contain vulnerabilities that an attacker could remotely exploit in order to gain full control of those devices. According to a report written by the security firm Rapid7, Hikvision’s DVRs contain three fairly typical buffer overflows in the request...
CVE-2014-4880
creationtimestamp| type| source ---|---|--- 2014-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35356 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/hikvisionrtspbof.rb 2025-02-06 03:13:41+00:00| seen|...
Hikvision DVR RTSP Request Remote Code Execution Exploit
This module exploits a buffer overflow in the RTSP request parsing code of Hikvision DVR appliances. The Hikvision DVR devices record video feeds of surveillance cameras and offer remote administration and playback of recorded footage. The vulnerability is present in several models / firmware...