CVE-2018-4891

CVE-2018-4891 affects Adobe Acrobat Reader (and related products) up to versions 2018.009.20050, 2017.011.30070, and 2015.006.30394. The issue arises from a computation in the XPS module that handles TIFF data, which reads past the end of the target buffer. This can lead to exposure of sensitive ...

Adobe Acrobat < 2015.006.30413 / 2017.011.30078 / 2018.011.20035 Multiple Vulnerabilities (APSB18-02)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30413, 2017.011.30078, or 2018.011.20035. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...

Adobe Acrobat Reader DC (Continuous Track) Multiple Vulnerabilities (APSB18-02) - Windows

Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat and Reader Out-of-bounds read (APSB18-02: CVE-2018-4891)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

KLA11193 Multiple vulnerabilities in Adobe Arcobat&Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code and gain priveleges. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities can be exploited to execute arbitrary...

CVE-2016-4891

Cross-site request forgery CSRF vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an administrator to change settings via unspecified vectors...

CVE-2016-4891

CVE-2016-4891 is a CSRF vulnerability in SetucoCMS affecting all versions, enabling remote attackers to hijack an administrator’s session to change settings via unspecified vectors. The linked JVN entries confirm the issue and note the impact as unintended setting changes; multiple sources also r...

JVN#80157683: SetucoCMS multiple vulnerabilities

SetucoCMS provided by SetucoCMS Project is a content management system CMS. SetucoCMS contains multiple vulnerabilities listed below. Cross-site request forgery - CVE-2016-4891 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N| Base Score: 5.4 CVSS v2|...

CVE-2015-4891

CVE-2015-4891 affects Oracle Solaris 11.2, where the local NSCD component is vulnerable. Unknown root cause in NSCD handling leads to partial compromise of confidentiality, integrity, and availability for local users. Exploitation status is not detailed in the provided documents. The advisory/cpu...

CVE-2014-4891

CVE-2014-4891 affects the CT iHub Android app (package com.concursive.ctihub). The root cause: the app does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle scenarios to spoof servers and capture sensitive information via crafted certificates. The connected sources confi...

CVE-2012-4891

The CVE-2012-4891 entry describes a Cross-site scripting (XSS) vulnerability in ManageEngine Firewall Analyzer 7.2, impacting the fw/index2.do endpoint via the url parameter. This is a distinct vector from CVE-2012-4889. The NVD notes a MEDIUM severity with a CVSS v2 base score of 4.3 (NETWORK, l...

CVE-2010-4891

Vulnerability: The TYPO3 extension ke_yac (Yet Another Calendar) is affected by a SQL injection in versions before 1.1.2. Root cause per sources: improper handling of input in the extension allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Impact: remote exploitat...

CVE-2009-4891

CS-Cart 2.0.0 Beta 3 is affected by an SQL injection in index.php via the product_id parameter in the products.view action. The vulnerability allows remote attackers to execute arbitrary SQL commands on the backend. The issue is documented across multiple sources (e.g., Exploit-DB exploit 8184 an...

CVE-2008-4891

Cross-site scripting XSS vulnerability in signme.inc.php in Planetluc SignMe 1.5 before 1.55 allows remote attackers to inject arbitrary web script or HTML via the hash parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4891

Cross-site scripting XSS vulnerability in signme.inc.php in Planetluc SignMe 1.5 before 1.55 allows remote attackers to inject arbitrary web script or HTML via the hash parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4891

CVE-2008-4891 affects Planetluc SignMe 1.5 before 1.55. The vulnerability is a cross-site scripting (XSS) flaw in signme.inc.php that allows an attacker to inject arbitrary script or HTML via the hash parameter. Per NVD, the CVSS v2 base score is 4.3 (Medium) with network attack vector, no authen...

Microsoft Visual Studio PDWizard.ocx ActiveX Control Code Execution (CVE-2007-4891)

Microsoft Visual Studio is a software development product for computer programmers. It centers on an integrated development environment which lets programmers create standalone applications, web sites, web applications, and web services.The vulnerability is due to an error in the Microsoft Visual...

Microsoft Visual Studio PDWizard.ocx ActiveX vulnerability

Added: 09/30/2007 CVE: CVE-2007-4891 BID: 25638 OSVDB: 37106 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem ActiveX controls contained in the PDWizard.ocx file in Microsoft Visual Studio 6.0 expose the StartProcess metho...

DSquare Exploit Pack: D2SEC_PDWIZARD

Name| d2secpdwizard ---|--- CVE| CVE-2007-4891 Exploit Pack| D2ExploitPack Description| Microsoft Visual Studio PDWizard.ocx ActiveX Arbitrary Code Execution Vulnerability Notes|...

CVE-2007-4891

CVE-2007-4891 concerns the PDWizard.ocx ActiveX control in Microsoft Visual Studio 6.0. Affected component: PDWizard.ocx (Visual Studio 6.0) with versions 6.0.0.9782 and earlier. Root cause: the PDWizard.ocx ActiveX control exposes dangerous methods (StartProcess, SyncShell, SaveAs, CABDefaultURL...