62 matches found
KLA11193 Multiple vulnerabilities in Adobe Arcobat&Reader
Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code and gain priveleges. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities can be exploited to execute arbitrary...
Adobe Acrobat and Reader Heap Overflow (APSB18-02: CVE-2018-4910)
A buffer overflow vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
Oracle MySQL Multiple Unspecified Vulnerabilities-05 (Oct 2015) - Linux
Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...
CVE-2016-4910
Cybozu Garoon versions 3.0.0 to 4.2.2 contain an access restriction bypass vulnerability in MultiReport filters. Remote authenticated attackers may delete other operational administrators’ MultiReport filters due to the underlying access control flaw. This CVE is corroborated by multiple sources ...
CVE-2017-4910
CVE-2017-4910 refers to multiple out-of-bounds read vulnerabilities in the JPEG2000 parser (TPView.dll) affecting VMware Workstation 12.x (before 12.5.3) and Horizon View Client 4.x (before 4.4.0). The root cause is improper validation in TPView.dll leading to code execution or Denial of Service ...
CVE-2012-4910
CVE-2012-4910 entry is rejected/not used and does not represent an active vulnerability.
Fedora Update for community-mysql FEDORA-2016-65
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : mysql (openSUSE-2015-889) (BACKRONYM)
MySQL was updated to 5.6.27 to fix security issues and bugs. The following vulnerabilities were fixed as part of the upstream release boo951391: CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789, CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800, CVE-2015-4802, CVE-2015-4815,...
CVE-2015-4910
CVE-2015-4910 is an unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier that allows remote authenticated users to affect availability via unknown Memcached-related vectors. Public advisories from MiracleLinux (AXSA:2016-226/224) and Red Hat RHSA-2016:0705 indicate the fix is upgra...
CVE-2014-4910
CVE-2014-4910 affects X.Org xf86-video-intel (notably around version 2.99.911). A directory traversal in tools/backlight_helper.c enables remote attackers to create or overwrite arbitrary files via a .. in the interface name. Several connected advisories reference the same flaw and note fixes in ...
openSUSE Security Update : icedtea-web (openSUSE-SU-2011:0829-1)
This update of icedtea/icedtea-web fixes two issues : - CVE-2011-2513: CVSS v2 Base Score: 4.3: An information leak allows unsigned Web Start applications to determine the path to the cache directory used to store downloaded class and jar files. - CVE-2011-2514: CVSS v2 Base Score: 5.1 An unsigne...
Fedora Update for openssl FEDORA-2014-4910
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-4910
The CVE-2011-4910 entry describes a Cross-site scripting (XSS) vulnerability in Joomla! prior to 1.5.12, exploitable by remote attackers to inject arbitrary web script or HTML via the PATH_INFO. Affected product is Joomla! (older major version), with the root cause being improper handling/validat...
CVE-2010-4910
.Product: ColdGen ColdCalendar 2.06. Vulnerability: SQL injection in the index.cfm handling ViewEventDetails with the EventID parameter, allowing remote execution of arbitrary SQL commands. Root cause: Improper input handling leading to SQLi. Impact: potential data exposure/modification, dependin...
CVE-2009-4910
CVE-2009-4910 is an XSS vulnerability in the WebVPN portal of Cisco ASA 5580 series devices running software before 8.1(2) (Bug ID CSCsq78418). It allows remote attackers to inject arbitrary web script/HTML via unspecified vectors. Documented impact is limited to the browser-based context; no exp...
Sun Java Web Start Remote Command Execution Vulnerability (Windows)
This host is running Sun Java Web Start and is prone to Remote Command Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavawscodeexecvulnwin.nasl 7174 2017-09-18 11:48:08Z asteins $ Sun Java Web Start Remote Command Execution Vulnerability Windows Authors: Veerendra GG Copyright:...
CVE-2008-4910
CVE-2008-4910 affects Sun Java Web Start (BasicService). The vulnerability allows a remote attacker to execute arbitrary programs on a client machine by passing a file:// URL argument to the showDocument method. Impact is described as remote code execution with full confidentiality/integrity/avai...
CVE-2007-4910
Unspecified vulnerability in netInvoicing before 2.7.3 has unknown impact and attack vectors, related to "security check soap"...
CVE-2007-4910
CVE-2007-4910 concerns an unspecified vulnerability in netInvoicing prior to 2.7.3, with an unclear impact and attack vectors. The description links the issue to a component/string labeled “security check soap,” but concrete root-cause, affected modules, fixes, or exploit details are not provided...