CVE-2018-4894

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and earlier versions. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer; the computation is part of...

Adobe Acrobat < 2015.006.30413 / 2017.011.30078 / 2018.011.20035 Multiple Vulnerabilities (APSB18-02)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30413, 2017.011.30078, or 2018.011.20035. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...

Adobe Acrobat Reader DC (Continuous Track) Multiple Vulnerabilities (APSB18-02) - Windows

Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

KLA11193 Multiple vulnerabilities in Adobe Arcobat&Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code and gain priveleges. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities can be exploited to execute arbitrary...

CVE-2016-4894

CVE-2016-4894 affects SetucoCMS. The connected records describe a remote DoS vulnerability in all SetucoCMS versions, caused by an unspecified vector that can lead to availability degradation. Public details consistently identify the affected product as SetucoCMS and label the impact as denial of...

JVN#80157683: SetucoCMS multiple vulnerabilities

SetucoCMS provided by SetucoCMS Project is a content management system CMS. SetucoCMS contains multiple vulnerabilities listed below. Cross-site request forgery - CVE-2016-4891 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N| Base Score: 5.4 CVSS v2|...

prisjakt.nu XSS vulnerability

Vulnerable URL: http://www.prisjakt.nu/privatlan.php?belopp=20%20000=m30="==jaink=ja=ja=ja Details: Description| Value ---|--- Patched:| Yes, at 05.02.2016 Latest check for patch:| 05.02.2016 01:22 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4894 Google...

CVE-2015-4894

Unspecified vulnerability in the Mobile Server component in Oracle Database Mobile/Lite Server 10.3.0.3, 11.3.0.2, and 12.1.0.0 allows remote authenticated users to affect integrity and availability via unknown vectors...

CVE-2015-4894

Oracle CVE-2015-4894 concerns an unspecified vulnerability in the Mobile Server component of Oracle Database Mobile/Lite Server versions 10.3.0.3, 11.3.0.2, and 12.1.0.0. The available connected records indicate remote authenticated access could affect integrity and availability via unknown vecto...

CVE-2014-4894

The CVE-2014-4894 entry concerns the Android MyMetro app (package com.myrippleapps.mymetro) version 2.4.7. The issue is that the app does not verify X.509 certificates from SSL servers, creating vulnerability to man-in-the-middle attackers who can spoof servers and access sensitive information vi...

Google SketchUp '.SKP' File Memory Corruption Vulnerability - Windows

Google SketchUp is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-4894

CVE-2012-4894 affects Google SketchUp prior to 8.0.14346 (8 Maintenance 3). The vulnerability allows user-assisted remote attackers to execute arbitrary code or cause a denial of service via a crafted SKP file, due to memory corruption when parsing SKP content. OpenVAS/NVD entries corroborate the...

Google SketchUp < 8.0.14346 Multiple Vulnerabilities

The version of Google SketchUp installed on the remote Windows host is earlier than 8.0.14346. As such, it reportedly is affected by the following vulnerabilities: - The application fails to handle certain types of '.SKP' files. An attacker can exploit this issue by providing a specially crafted...

Memory Corruption in Google SketchUp Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Google SketchUp software version 8.0.11752.0 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor,...

CVE-2011-4894

Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections...

CVE-2011-4894

CVE-2011-4894 affects Tor prior to 0.2.2.34 when run as a bridge. The issue is that DirPort connections are used directly for directory fetches instead of a Tor TLS connection, which can enable remote observers to enumerate bridges by monitoring DirPort activity. The available connected documents...

CVE-2010-4894

CVE-2010-4894 : A SQL injection vulnerability in chillyCMS 1.1.3 is reported in core/showsite.php via the name parameter, potentially allowing remote attackers to execute arbitrary SQL commands. This is based on the NVD entry; no remediation details are provided in the supplied documents.

Directory traversal

Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to include and possibly execute arbitrary files via directory traversal sequences in the templatepath parameter to 1 masthead.inc.php, 2...

CVE-2009-2220

CVE-2009-2220 describes multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c—triggered when register_globals is enabled and magic_quotes_gpc is disabled—that allow remote inclusion/execution of arbitrary files via template_path in masthead.inc.php, toppanel.inc.php, contact.inc.php,...

CVE-2008-4894

Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the...