Adobe Acrobat 2017 Security Updates (APSB18-09) - Mac OS X

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

CVE-2011-4965

...

CVE-2011-4965

CVE-2011-4965 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-4965

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ...

CVE-2017-4965

CVE-2017-4965: Several forms in the RabbitMQ management UI are vulnerable to XSS in affected releases (RabbitMQ: 3.4.x, 3.5.x, 3.6.x before 3.6.9; RabbitMQ for PCF: 1.5.x, 1.6.x before 1.6.18, 1.7.x before 1.7.15). Debian DLA-2710 lists this alongside CVEs 4966/4967 with a fix for 3.6.6-1+deb9u1;...

CVE-2017-4965

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ...

CVE-2016-4965

Fortinet FortiWan formerly AscernLink before 4.2.5 allows remote authenticated users with access to the nslookup functionality to execute arbitrary commands with root privileges via the graph parameter to diagnosiscontrol.php...

CVE-2016-4965

Fortinet FortiWan (AscernLink) before 4.2.5 is vulnerable to OS command injection via the graph parameter to diagnosis_control.php, allowing a remote authenticated user with access to nslookup to run commands as root. The vulnerability affects FortiWan’s web interface; the CVSS base metrics indic...

FortiWAN Multiple Vulnerabilities

FortWan 4.2.4 and below is exposed to cross site scripting, information leak and escalation of privilege vulnerabilities. CVE-2016-4965: Non-administrative authenticated user having access privileges to the nslookup functionality can perform OS command injection in the root user context...

Fortinet FortiWAN load balancer appliance contains multiple vulnerabilities

Overview The Fortinet FortiWAN Ascernlink network load balancer appliance contains multiple vulnerabilities. Description According to the reporter, the Fortinet FortiWAN network load balancer appliance contains the following vulnerabilities.CWE-78: Improper Neutralization of Special Elements used...

CVE-2015-4965

maximouiweb/webmodule/webclient/utility/merlin.jsp in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX004 and 7.6.0 before 7.6.0.1 IFIX002 for SmartCloud Control Desk; and Maximo Ass...

CVE-2014-4965

CVE-2014-4965 describes multiple cross-site scripting (XSS) vulnerabilities in Shopizer 1.1.5 and earlier. The flaws allow remote attackers to inject arbitrary web script or HTML via: (1) customername in central/orders/searchcriteria.action; (2) productname in central/catalog/productlist.action; ...

CVE-2013-4965

CVE-2013-4965 affects Puppet Enterprise prior to 3.1.0. The flaw is that authentication attempts for a console account are not properly restricted, enabling brute-force attempts that can bypass access controls. The description states the issue plainly but does not provide product-specific vulnera...

Oracle Linux 5 : python (ELSA-2009-1176)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1176 advisory. - Multiple integer overflows in python core CVE-2008-2315 - PyStringFromStringAndSize does not check for negative size values CVE-2008-1887 - Multiple...

CVE-2012-4965

CVE-2012-4965 is rejected/not used; reference CVE-2012-6569 instead.

CVE-2012-4965

...

Scientific Linux Security Update : python for SL5.x i386/x86_64

When the assert system call was disabled, an input sanitization flaw was revealed in the Python string object implementation that led to a buffer overflow. The missing check for negative size values meant the Python memory allocator could allocate less memory than expected. This could result in...

CentOS Update for python CESA-2009:1176 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-4965

Summary: CVE-2009-4965 is a SQL injection vulnerability in the AIRware Lexicon (air_lexicon) extension version 0.0.1 for TYPO3. The described impact is that remote attackers can execute arbitrary SQL commands via unspecified vectors. The available connected documents corroborate the vulnerability...

Mac OS X Security Update 2007-009

The remote host is missing Security Update 2007-009. One or more of the following components are affected: Address Book CFNetwork ColorSync Core Foundation CUPS Desktop Services Flash Player Plug-in GNU Tar iChat IO Storage Family Launch Services Mail perl python Quick Look ruby Safari Safari RSS...