CVE-2018-4925

Adobe Digital Editions pre-4.5.8 is affected by CVE-2018-4925 due to an exploitable out-of-bounds read that can disclose information. This affects Windows and macOS versions prior to 4.5.8; remediation is to upgrade to 4.5.8 or later per APSB18-13. Connected sources also reference related vulnera...

Adobe Digital Editions Multiple Information Disclosure Vulnerabilities (APSB18-13) - Windows

Adobe Digital Edition is prone to multiple information disclosure vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-4925 JUNOSe: Line Card Reset: processor exception 0x68616c74 (halt) task: scheduler, upon receipt of crafted IPv6 packet

Receipt of a specifically malformed IPv6 packet processed by the router may trigger a line card reset: processor exception 0x68616c74 halt in task: scheduler. The line card will reboot and recover without user interaction. However, additional specifically malformed packets may cause follow-on lin...

CVE-2016-4925

CVE-2016-4925 affects Juniper JUNOSe/J Series E Series routers with IPv6 licensed and enabled. Receipt of a specifically malformed IPv6 packet can trigger a processor exception 0x68616c74 (halt) in the scheduler, causing the line card to reboot. While the line card will recover, additional malfor...

VMware Workstation 12.x < 12.5.7 Multiple Vulnerabilities (VMSA-2017-0015)

The version of VMware Workstation installed on the remote Windows host is 12.x prior to 12.5.7. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability exists in VMware workstation within the SVGA device. An attacker with user access can exploit this t...

Many high-risk SVGA code execution vulnerability bug,VMware efforts to be patched-vulnerabilities and early warning-the black bar safety net

VMware this week announced a patch to fix a number of vulnerabilities flaws bug, contains a major vulnerability flaws bugs, exploits flaws bug touches the product containing ESXi, vCenter Server, Workstation and Fusion. This is the major vulnerability flaws bug number for CVE-2017-4924, which is ...

CVE-2017-4925

CVE-2017-4925 is a NULL pointer dereference vulnerability that occurs when handling guest RPC requests, enabling a locally authenticated attacker with normal user privileges to crash affected VMs. Affected products/versions include VMware ESXi 6.5 (without patch ESXi650-201707101-SG), 6.0 (withou...

CVE-2014-4925

Cross-site scripting XSS vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40...

CVE-2014-4925

The CVE-2014-4925 entry concerns Good for Enterprise for Android (versions 2.8.0.398 and 1.9.0.40) with a cross-site scripting/HTML-injection flaw in emails. Public disclosures describe a crafted HTML payload (notably a meta refresh) that can redirect users to a malicious URL when opening a messa...

CVE-2015-4925

Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.2.0.4 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2015-4925

The CVE-2015-4925 entry concerns Oracle Database Server’s Workspace Manager in version 11.2.0.4, described as an unspecified vulnerability that could, via unknown vectors, affect confidentiality, integrity, and availability when accessed by remote authenticated users. The linked records reaffirm ...

Gentoo Security Advisory GLSA 201412-47

Gentoo Linux Local Security Checks GLSA 201412-47 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Good For Enterprise Android HTML Injection

https://labs.integrity.pt/articles/good-for-enterprise-android-html-injection-cve-2014-4925/ 1. Vulnerability Properties Title: HTML Injection in Good for Enterprise Android CVE ID: CVE-2014-4925 CVSSv2 Base Score: 6.4 AV:N/AC:L/Au:N/C:P/I:P/A:N Vendor: Good Technology http://www1.good.com/...

GLSA-201412-47 : TORQUE Resource Manager: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-47 TORQUE Resource Manager: Multiple vulnerabilities Multiple vulnerabilities have been discovered in TORQUE Resource Manager. Please review the CVE identifiers referenced below for details. Impact : A context-dependent...

SOL15484 - OpenSSH vulnerability CVE-2006-4925

Recommended action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not list any version...

Fedora Update for wireshark FEDORA-2013-17661

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2013-17661 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora 19 : wireshark-1.10.1-1.fc19 (2013-16362)

Ver. 1.10.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora Update for wireshark FEDORA-2013-16362

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-4925

CVE-2013-4925 is a Wireshark vulnerability (Wireshark 1.10.x prior to 1.10.1) caused by an integer signedness error in epan/dissectors/packet-dcom-sysact.c (DCOM ISystemActivator dissector). The issue allows remote attackers to trigger a denial of service via a crafted packet, resulting in an ass...

CVE-2012-4925

CVE-2012-4925 describes multiple SQL injection vulnerabilities in Img Pals Photo Host 1.0, triggered via the u parameter in approve.php when performing app0 or app1 actions. The issue allows remote attackers to execute arbitrary SQL commands. The CVSSv2 score is 7.5 (HIGH) with network attack vec...