94 matches found
KLA11193 Multiple vulnerabilities in Adobe Arcobat&Reader
Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code and gain priveleges. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities can be exploited to execute arbitrary...
VMware Horizon's macOS Client Code Injection Vulnerability
VMware Horizon's macOS client versions prior to 4.5 suffer from a code injection vulnerability. CVE-2017-4918: Code Injection in VMware Horizonas macOS Client Metadata =================================================== Release Date: 10-July-2017 Author: Florian Bogner // https://bogner.sh Affect...
CVE-2017-4918
VMware Horizon View Client 2.x, 3.x and 4.x prior to 4.5.0 contains a command injection vulnerability in the service startup script. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on the Mac OSX system where the client is installed...
CVE-2012-4918
CVE-2012-4918 affects Call of Duty Elite for iOS 2.0.1. The vulnerability is that the app does not properly validate the server’s SSL certificate, enabling a Man-in-the-Middle (MITM) attack and potential exposure of sensitive information. The available documents confirm the root cause (insufficie...
CVE-2011-4918
CVE-2011-4918 affects Elxis CMS versions 2009.2, 2009.3 and 2009.3 Aphrodite prior to revision 2684. The vulnerability is multiple cross-site scripting (XSS) that allows remote attackers to inject arbitrary web script or HTML via (1) the task parameter to elxis/index.php and (2) PATH_INFO to elxi...
CVE-2011-4918
creationtimestamp| type| source ---|---|--- 2011-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36407 2011-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36406...
CVE-2010-4918
PHP remote file inclusion vulnerability in iJoomla Magazine commagazine component 3.0.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the config parameter to magazine.functions.php...
CVE-2010-4918
PHP remote file inclusion vulnerability in iJoomla Magazine commagazine component 3.0.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the config parameter to magazine.functions.php...
CVE-2009-4918
CVE-2009-4918 affects Cisco ASA 5580 series devices running software before 8.1(2). The issue allows remote attackers to trigger a denial of service by sending malformed NAT-T packets, causing the IKE process to hang. Root cause is tied to Bug ID CSCsr74439. The available information indicates th...
CVE-2008-4918
Cross-site scripting XSS vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is n...
CVE-2008-4918
SonicWALL SonicOS Enhanced (pre-4.0.1.1) on SonicWALL Pro 2040 and TZ 180/190 is affected by an XSS vulnerability in the Content Filtering (CFS) block page. A crafted URL to a blocked site can cause arbitrary web script or HTML to be injected into the target’s browser, enabling universal website ...
CVE-2008-4918
creationtimestamp| type| source ---|---|--- 2008-10-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32552...
CVE-2007-4918
CVE-2007-4918 describes a SQL injection in Gelato’s web app: classes/gelato.class.php vulnerable to arbitrary SQL via the post parameter to index.php . Affected: Gelato (web application). Root cause: unsafely constructed SQL from user input (no sufficient input validation/sanitization). Impact: r...