CVE-2019-4886

CVE-2019-4886 entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-4886

...

CVE-2017-4886

CVE-2017-4886 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-4886

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation occurs in...

CVE-2018-4886

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation occurs in...

CVE-2018-4886

CVE-2018-4886 affects Adobe Acrobat Reader and related Flash/EMF processing: the issue is a buffer overread in the image conversion engine when handling Enhanced Metafile Format (EMF) data, specifically with bitmap rectangles. This can cause sensitive data exposure. The affected products are Adob...

Adobe Acrobat Reader DC (Continuous Track) Multiple Vulnerabilities (APSB18-02) - Windows

Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat < 2015.006.30413 / 2017.011.30078 / 2018.011.20035 Multiple Vulnerabilities (APSB18-02)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30413, 2017.011.30078, or 2018.011.20035. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...

KLA11193 Multiple vulnerabilities in Adobe Arcobat&Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code and gain priveleges. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities can be exploited to execute arbitrary...

poisk.ngs.ru XSS vulnerability

Vulnerable URL: https://poisk.ngs.ru/?charset=utf-8=1==a%27aa%22onfocus=prompt/OPENBUGBOUNTY/%20autofocus=x%20bad=--%3E%3C/title%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.09.2017 Vulnerability type...

CVE-2016-4886

Cross-site request forgery CSRF vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...

CVE-2016-4886

CVE-2016-4886 is described in connected sources as a cross-site request forgery (CSRF) vulnerability affecting baserCMS with the Mail plugin (versions 3.0.10 and earlier). The underlying issue is CSRF when a logged-in administrator visits a malicious URL, which can force unintended administrative...

translit.net XSS vulnerability

Vulnerable URL: http://translit.net/ru/ Details: Description| Value ---|--- Patched:| Yes, at 08.01.2017 Latest check for patch:| 08.01.2017 14:35 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4886 VIP website status:| Yes Check translit.net SSL connection:|...

JVN#92765814: Multiple vulnerabilities in baserCMS

baserCMS provided by baserCMS User Group is an opensource content management system. baserCMS and bundled plugins "Blog", "Mail", "Feed", and "Uploader" contain the following vulnerabilities. Cross-site request forgery CWE-352 - CVE-2016-4879, CVE-2016-4881, CVE-2016-4884, CVE-2016-4885,...

[ERPSCAN-15-028] Oracle E-Business Suite - XXE injection Vulnerability

ADVISORY INFORMATION Title: Oracle E-Business Suite XXE injection Advisory ID: ERPSCAN-15-028 Advisory URL: http://erpscan.com/advisories/erpscan-15-028-oracle-e-business-suite-xxe-injection-vulnerability/ Date published: 20.10.2015 Vendors contacted: Oracle 2. VULNERABILITY INFORMATION Class:...

CVE-2015-4886

Oracle E-Business Suite CVE-2015-4886 is an XXE injection vulnerability in the Report Manager component (OA_HTML/copxml) that can allow a remote attacker to read arbitrary files, cause DoS, or enable SMB relay by sending a crafted XML with a DTD. Vulnerable product/version: Oracle E-Business Suit...

CVE-2012-4886

CVE-2012-4886 describes a stack-based buffer overflow in Kingsoft WPS Office 2012’s wpsio.dll (likely version 8.1.0.3238 or similar). A long BSTR string copied into a stack buffer enables a remote attacker to execute arbitrary code. Public PoCs and exploits exist (e.g., Exploit-DB, PoC binaries, ...

WPS Office - Wpsio.dll Stack Buffer Overflow

WPS Office - Wpsio.dll Stack Buffer Overflow WPS Office Wpsio.dll Stack Buffer Overflow Vulnerability PoC: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/25140.tgz 1 Summary CVE number: CVE-2012-4886 Impact: High Vendor homepage: http://www.wps.cn Credit:...

WPS Office - 'Wpsio.dll' Stack Buffer Overflow

WPS Office Wpsio.dll Stack Buffer Overflow Vulnerability PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25140.tgz 1 Summary CVE number: CVE-2012-4886 Impact: High Vendor homepage: http://www.wps.cn Credit: Zhangjiantao of Hangzhou DPtech Technologies 2...

CVE-2010-4886

The CVE-2010-4886 vulnerability affects the TYPO3 tweetbutton extension prior to version 1.0.5. It is an XSS flaw that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Affected component: TYPO3 tweetbutton (extension). Root cause details are not explicitly provided...