52 matches found
CVE-2019-4898
CVE-2019-4898 entry is rejected/not used per Initial Description.
CVE-2018-4898
CVE-2018-4898 affects Adobe Acrobat Reader: versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, 2015.006.30394 and earlier. Root cause is a buffer overrun in the XPS engine that writes data past the end of the intended buffer while adding vector graphics/images to a fixed page. Impac...
Adobe Acrobat < 2015.006.30413 / 2017.011.30078 / 2018.011.20035 Multiple Vulnerabilities (APSB18-02)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30413, 2017.011.30078, or 2018.011.20035. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...
Adobe Acrobat Reader DC (Continuous Track) Multiple Vulnerabilities (APSB18-02) - Windows
Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
KLA11193 Multiple vulnerabilities in Adobe Arcobat&Reader
Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code and gain priveleges. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities can be exploited to execute arbitrary...
CVE-2017-4898
VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vmx" process loading DLLs from a path defined in the local environment-variable. Successful exploitation of this issue may allow normal users to escalate privileges to System in th...
CVE-2017-4898
CVE-2017-4898 affects VMware Workstation Pro/Player 12.x prior to 12.5.3. The issue is a DLL loading vulnerability in the vmware-vmx process caused by loading DLLs from a path defined in a local environment variable, which may allow a local attacker to escalate privileges to SYSTEM on the host. V...
CVE-2016-4898
CVE-2016-4898 affects the Linux datamover module of NovaBACKUP DataCenter, prior to version 09.06.03.0353. The vulnerability enables remote command execution via unspecified attack vectors. The CVE is documented in multiple sources (NVD/NVDCNVD and CNVD) with no explicit exploit details provided ...
VMSA-2017-0003:VMware Workstation update addresses multiple security issues
VMSA-2017-0003 VMware Workstation update addresses multiple security issues VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0003 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Workstation update addresses multiple security issues...
CVE-2015-4898
Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote authenticated users to affect integrity via vectors related to Diagnostics and DMZ...
CVE-2015-4898
CVE-2015-4898 affects Oracle E-Business Suite versions 11.5.10.2, 12.0.6, 12.1.3, 12.2.3, and 12.2.4 via the Oracle Applications Framework component. The vulnerability allows remote authenticated users to affect integrity through vectors related to Diagnostics and DMZ . The NVD entry lists a MEDI...
CVE-2014-4898
The CVE-2014-4898 entry concerns the Harivijay Android app (package com.upasanhar.marathi.harivijay) version 4.0, which does not verify X.509 certificates when connecting to SSL servers. This enables man-in-the-middle attackers to spoof servers and access sensitive information via crafted certifi...
CVE-2013-4898
CVE-2013-4898 : Unrestricted file upload in SocialEngine Timeline Plugin 4.2.5p9 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then retrieving it from public/temporary/timeline/. The vulnerability stems from accepting uploaded files ...
SocialEngine 4.5 Shell Upload
INTRODUCTION ------------------------------------------------------------- The plugin has the objective give you a better visual for the user profile, allowed the addition of cover image keeping the layout closest to the style of modern social networks, among other features. + DESCRIPTION OF...
SocialEngine Timeline Plugin 4.2.5p9 - Arbitrary File Upload
SocialEngine Timeline Plugin 4.2.5p9 - Arbitrary File Upload Exploit Title: Sending php file in the timeline plugin cover image of SocialEngine 4.5 Date: 2013-08-17 Discovered by: Wesley Henrique Leite aka "spyk2r" Vendor Homepage: http://webhive.com.ua/ Software Link:...
SocialEngine Timeline Plugin 4.2.5p9 - Arbitrary File Upload
Exploit Title: Sending php file in the timeline plugin cover image of SocialEngine 4.5 Date: 2013-08-17 Discovered by: Wesley Henrique Leite aka "spyk2r" Vendor Homepage: http://webhive.com.ua/ Software Link: http://webhive.com.ua/store/product.php?idproduct=46 Version: plugin Timeline 4.2.5p9 fo...
CVE-2012-4898 Tropos Wireless Mesh Routers Insufficient Entropy
Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source of entropy for SSH keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere...
CVE-2012-4898
CVE-2012-4898 affects Tropos Networks’ Mesh OS prior to 7.9.1.1. The vulnerability stems from insufficient entropy used to generate SSH host keys, enabling a remote attacker to perform a Man-in-the-Middle attack by exploiting knowledge of non-unique keys from another installation. Impact includes...
WordPress 'setup-config.php' Multiple Vulnerabilities
WordPress is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescripti...