110 matches found
RHEL 8 : freetype (RHSA-2020:4949)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4949 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. FreeType loads, hints, and renders individual glyphs...
CVE-2019-4949
CVE-2019-4949 is rejected/not used and does not represent an active vulnerability entry.
Adobe Acrobat 2017 Security Updates (APSB18-09) - Windows
Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
Adobe Acrobat 2017 Security Updates (APSB18-09) - Mac OS X
Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
Adobe Acrobat and Reader Out-of-bounds read (APSB18-09: CVE-2018-4949)
A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...
CVE-2017-4949
VMware Workstation and Fusion contain a use-after-free vulnerability in VMware NAT service when IPv6 mode is enabled. This issue may allow a guest to execute code on the host. Note: IPv6 mode for VMNAT is not enabled by default...
VMSA-2018-0005:VMware Workstation, and Fusion updates resolve use-after-free and integer-overfLOW vulnerabilities
VMSA-2018-0005 VMware Workstation, and Fusion updates resolve use-after - free and integer-overflow vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0005 VMware Security Advisory Severity: Critical VMware Security Advisory Synopsis: VMware Workstation, and...
CVE-2014-4949
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none...
CVE-2014-4949
CVE-2014-4949 is rejected/not used and does not represent an active vulnerability entry.
Cloudera Manager =< 5.5 Process logs access (CVE-2016-4949)
Cloudera Manager =:7180/cmf/process//logs?filename=stderr,stdout.log The prerequisite to exploit this vulnerability is to know or iterate the targeted process identifier. The impact of the vulnerability is that a poorly developed process might contain sensitive information. The Cloudera CERT...
CVE-2016-4949
CVE-2016-4949 affects Cloudera Manager 5.5 and earlier. A remote attacker could obtain sensitive information by manipulating the filename parameter in the logs endpoint /cmf/process//logs, supplying either “stderr.log” or “stdout.log”. The underlying issue is an information disclosure in the proc...
CVE-2013-4949
CVE-2013-4949 affects MachForm 2, specifically an unrestricted file upload vulnerability in view.php. An attacker can upload a PHP file and access it in the upload directory (data/), allowing remote code execution. The NVD summary cites MachForm 2 as vulnerable to arbitrary PHP execution via a cr...
CVE-2013-4949
creationtimestamp| type| source ---|---|--- 2013-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26553...
CVE-2012-4949
CVE-2012-4949 is an SQL injection vulnerability in ESRI ArcGIS 10.1 where the where parameter in a REST service query URI can be exploited by remote authenticated users to execute arbitrary SQL. The root cause is inadequate sanitization of SQL commands in the where clause, enabling a subset of SQ...
CVE-2012-4949
creationtimestamp| type| source ---|---|--- 2012-11-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/38016...
Esri ArcGIS server 10.1 contains a blind SQL injection vulnerability
Overview Esri's ArcGIS server version 10.1 contains a blind SQL injection vulnerability that allows remote attackers to execute a subset of SQL commands via a query operation where clause. Description The Esri ArcGIS server version 10.1 contains a blind SQL injection vulnerability CWE-89 for REST...
CVE-2011-4949
The CVE-2011-4949 entry concerns an SQL injection in EGroupware’s web UI: phpgwapi/js/dhtmlxtree/samples/with_db/loaddetails.php. Affected are EGroupware Enterprise Line (EPL) prior to 11.1.20110804-1 and EGroupware Community Edition prior to 1.8.001.20110805. The vulnerability allows remote atta...
CVE-2010-4949
CVE-2010-4949 is an XSS vulnerability affecting Joomla! installations using the FreiChat component prior to 2.1.2 and the FreiChatPure component prior to 1.2.2. The flaw allows remote attackers to inject arbitrary web script or HTML by inputting it in an unspecified window. Documents do not provi...