CVE-2019-4948

...

CVE-2018-4948

CVE-2018-4948 is a Heap Overflow in Adobe Acrobat/Reader affecting versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier. Successful exploitation could execute arbitrary code in the current user context. The connected Nessus entries (APSB18-09) enumerate ...

Adobe Acrobat 2017 Security Updates (APSB18-09) - Mac OS X

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Adobe Acrobat 2017 Security Updates (APSB18-09) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

CVE-2017-4948

CVE-2017-4948 is an out-of-bounds read flaw in TPView.dll affecting VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0). Exploitation is tied to scenarios where virtual printing is enabled, which is not by default in Workstation but is by default in Horizon...

Cloudera Manager =< 5.5 Stored and reflected XSS (CVE-2016-4948)

Cloudera Manager =:7180/cmf/hardware/hosts/templates - In the following fields of the Kerberos activation page, which can then be triggered visiting the page http://:7180/cmf/clusters/1/kerberos/wizard KDC Server Host Kerberos Security Realm Kerberos Encryption Types Advanced Configuration Snippe...

CVE-2016-4948

CVE-2016-4948 concerns multiple cross-site scripting (XSS) flaws in Cloudera Manager 5.5 and earlier. An attacker could inject arbitrary scripts via user-supplied input in (1) Template Name when renaming a template, (2) KDC Server host, (3) Kerberos Security Realm, (4) Kerberos Encryption Types, ...

CVE-2015-4948

netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors...

CVE-2015-4948

CVE-2015-4948 affects IBM AIX 5.3, 6.1, 7.1 and VIOS 2.2.x; netstat in these releases can allow a local user to escalate privileges when a Fibre Channel adapter is present. Root cause: a netstat-related vulnerability. Public patch guidance is present (e.g., AIX PTFs/U867672, U861500; see IBM advi...

CVE-2015-4948

netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors...

AIX 7.1 TL 3 : netstat (IV77299)

IBM AIX could allow a local attacker to escalate their privileges to root access through a vulnerability in netstat when a fiber channel adapter is present. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory netstatadvisory.as...

Citrix XenServer Multiple Security Updates (CTX140984)

A number of security vulnerabilities have been identified in Citrix XenServer. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix XenServer 6.2 Service Pack 1. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be...

CVE-2014-4948

Unspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to cause a denial of service and obtain sensitive information by modifying the guest virtual hard disk VHD...

TFTPDWIN 0.4.2 - Long Filename Buffer Overflow

No description provided by source. $Id: tftpdwinlongfilename.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

Fedora Update for jbigkit FEDORA-2014-4948

Check for the Version of jbigkit OpenVAS Vulnerability Test Fedora Update for jbigkit FEDORA-2014-4948 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2013-4948

The CVE-2013-4948 entry details a SQL injection in Machform 2’s view.php, exploitable via the element_2 parameter. This allows remote attackers to execute arbitrary SQL commands, with a CVSS v2 base score of 7.5 (HIGH). The affected software and exact vulnerable component are Machform 2, specific...

CVE-2013-4948

SQL injection vulnerability in view.php in Machform 2 allows remote attackers to execute arbitrary SQL commands via the element2 parameter...

CVE-2013-4948

creationtimestamp| type| source ---|---|--- 2013-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26553...

CVE-2012-4948

CVE-2012-4948 describes a default-configuration issue in Fortinet Fortigate UTM appliances: the same Fortigate CA certificate and private key are reused across devices, enabling an attacker with a man-in-the-middle vantage point to spoof SSL servers or sign malware on trusted chains. The CERT/CSA...

CVE-2011-4948

CVE-2011-4948 is a directory traversal vulnerability in EGroupware’s admin/remote.php. Affected products are EGroupware Enterprise Line (EPL) prior to 11.1.20110804-1 and EGroupware Community Edition prior to 1.8.001.20110805. The issue allows remote attackers to read arbitrary files by supplying...