Adobe Acrobat < 2015.006.30413 / 2017.011.30078 / 2018.011.20035 Multiple Vulnerabilities (APSB18-02)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30413, 2017.011.30078, or 2018.011.20035. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...

Adobe Acrobat Reader DC (Continuous Track) Multiple Vulnerabilities (APSB18-02) - Windows

Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

KLA11193 Multiple vulnerabilities in Adobe Arcobat&Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code and gain priveleges. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities can be exploited to execute arbitrary...

Oracle MySQL Multiple Unspecified Vulnerabilities-05 (Oct 2015) - Linux

Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...

CVE-2016-4890

ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie...

CVE-2016-4890

ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie...

CVE-2016-4890

CVE-2016-4890 affects ManageEngine ServiceDesk Plus prior to version 9.2. The vulnerability is due to an insecure cookie-generation method, which can allow an attacker who gains access to a cookie to obtain password information. Remediation guidance in the connected documents recommends updating ...

Fedora Update for community-mysql FEDORA-2016-65

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : mysql (openSUSE-2015-889) (BACKRONYM)

MySQL was updated to 5.6.27 to fix security issues and bugs. The following vulnerabilities were fixed as part of the upstream release boo951391: CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789, CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800, CVE-2015-4802, CVE-2015-4815,...

CVE-2015-4890

CVE-2015-4890 is an unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier that can allow remote authenticated users to affect availability via unknown vectors in the Server: Replication component. The connected advisories enumerate affected MySQL 5.6.x releases and indicate remediat...

Samsung PS50C7700 3D Plasma-TV Denial of Service (CVE-2013-4890)

A denial-of-service vulnerability has been reported in Samsung TV. The vulnerability is due to insufficient validation of certain values. A remote attacker can exploit this vulnerability by sending a specially crafted Connection request to the vulnerable server. Successful exploitation will cause...

CVE-2014-4890

CVE-2014-4890 affects the Android app Nano Digest (com.magzter.nanodigest) v3.0. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive data via a crafted certificate. Public sources (NVD and related reco...

Network Enabled Samsung TVs vulnerable to Denial of Service Attack

+Attack.png A vulnerability in the latest firmware of the network-enabled Samsung TV models allows potential attackers to crash the vulnerable devices using Denial of Service DoS Attack, according to security researcher Malik Mesellem. According to Malik, The web server DMCRUIS/0.1 installed on...

Samsung PS50C7700 TV - Denial of Service

The DMCRUIS/0.1 web server on Samsung TVs suffers from a denial of service vulnerability. !/usr/bin/python Exploit Title: Samsung TV Denial of Service DoS Attack Date: 07/21/2013 Exploit Author: Malik Mesellem - @MMEIT - http://www.itsecgames.com CVE Number: CVE-2013-4890 Vendor Homepage:...

Samsung PS50C7700 TV - Denial of Service

Samsung PS50C7700 TV - Denial of Service !/usr/bin/python Exploit Title: Samsung TV Denial of Service DoS Attack Date: 07/21/2013 Exploit Author: Malik Mesellem - @MMEIT - http://www.itsecgames.com CVE Number: CVE-2013-4890 Vendor Homepage: http://www.samsung.com Description: Resets some Samsung...

CVE-2013-4890

The CVE-2013-4890 entry affects the Samsung PS50C7700 TV where the DMCRUIS/0.1 web server crashes remotely when a long URI is sent to TCP port 5600. The Red Hat CVE page and multiple advisories confirm a denial-of-service condition (daemon crash) caused by an overly long request to the vulnerable...

Network Enabled Samsung TVs vulnerable to Denial of Service Attack

+Attack.png+Attack.png A vulnerability in the latest firmware of the network-enabled Samsung TV models allows potential attackers to crash the vulnerable devices using Denial of Service DoS Attack, according to security researcher Malik Mesellem. According to Malik, The web server DMCRUIS/0.1...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 titleen, 2 summaryen, or 3 bodyen parameter in a submitnews action to the news module, a different vulnerability than CVE-2012-4890. NOTE...

CVE-2012-4890

CVE-2012-4890 affects FlatnuX CMS versions up to 2011 08.09.2 and earlier. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via (1) a comment to the news, (2) the news title, or (3) folder names in a gallery. The root cause...

CVE-2011-4890

The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service daemon crash via a SELECT statement with a ROWNUM condition involving a subquery...