CVE-2011-4967

CVE-2011-4967, titled tog-Pegasus hash collision DoS vulnerability, affects the tog-Pegasus package (hash collision in its XML table) and is described across multiple sources as a DoS vector with a network attack surface. NVD lists CVSS2/3.1 base scores of 5.0 (Medium) and 7.5 (High) respectively...

CVE-2018-4967

CVE-2018-4967 corresponds to an Out-of-bounds read vulnerability in Adobe Acrobat and Reader. Affected products/versions include Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier. Successful exploitation could lead to information discl...

CVE-2018-4967

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

Adobe Acrobat 2017 Security Updates (APSB18-09) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Adobe Acrobat 2017 Security Updates (APSB18-09) - Mac OS X

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

CVE-2017-4967

CVE-2017-4967 : RabbitMQ and RabbitMQ for PCF have multiple forms in the management UI vulnerable to XSS across 3.4.x, 3.5.x, and 3.6.x prior to 3.6.9 (and related PCF versions). The root cause is unsanitized input in management UI forms, enabling cross-site scripting. Impact is limited to the ma...

CVE-2017-4967

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ...

CVE-2016-4967

Fortinet FortiWAN (AscernLink) before 4.2.5 is affected by CVE-2016-4967: an authenticated non-admin user can disclose sensitive data by accessing /script/cfg_show.php to grab a device configuration backup or /script/system/tcpdump.php to obtain a PCAP. The issue is confirmed across multiple sour...

Fortinet FortiWAN load balancer appliance contains multiple vulnerabilities

Overview The Fortinet FortiWAN Ascernlink network load balancer appliance contains multiple vulnerabilities. Description According to the reporter, the Fortinet FortiWAN network load balancer appliance contains the following vulnerabilities.CWE-78: Improper Neutralization of Special Elements used...

CVE-2015-4967

IBM Maximo Asset Management is affected by CVE-2015-4967, a SQL injection vulnerability. A remote attacker could send specially-crafted SQL statements to view, add, modify, or delete data in the back-end database. Affected products and versions include Maximo Asset Management (7.6, 7.5, 7.1), Max...

[oCERT-2014-004] Ansible input sanitization errors

2014-004 Ansible input sanitization errors Description: The Ansible project is an open source configuration management platform. The Ansible platform suffers from input sanitization errors that allow arbitrary code execution as well as information leak, in case an attacker is able to control...

[oCERT-2014-004] Ansible input sanitization errors

2014-004 Ansible input sanitization errors Description: The Ansible project is an open source configuration management platform. The Ansible platform suffers from input sanitization errors that allow arbitrary code execution as well as information leak, in case an attacker is able to control...

Updated ansible package fixes multiple security issues

Updated ansible package fixes security vulnerabilities: The Ansible platform before version 1.6.7 suffers from input sanitization errors that allow arbitrary code execution as well as information leak, in case an attacker is able to control certain playbook variables CVE-2014-4678, CVE-2014-4966,...

Fedora Update for ansible FEDORA-2014-8904

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : ansible-1.6.10-1.fc19 (2014-8904)

Update to 1.6.10 Update to 1.6.9 with more shell quoting fixes. Update to 1.6.7 Fixes CVE-2014-4966 and CVE-2014-4967 Update to 1.6.8 with fixes for shell quoting from previous release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora Update for ansible FEDORA-2014-8901

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : ansible-1.6.10-1.fc20 (2014-8901)

Update to 1.6.10 Update to 1.6.9 with more shell quoting fixes. Update to 1.6.7. Fixes CVE-2014-4966 and CVE-2014-4967 Update to 1.6.8 with fixes for shell quoting from previous release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

CVE-2013-4967

Puppet Enterprise before 3.0.1 allows remote attackers to obtain the database password via vectors related to how the password is "seeded as a console parameter," External Node Classifiers, and the lack of access control for /nodes...

CVE-2013-4967

Puppet Enterprise before 3.0.1 is vulnerable to an information-disclosure path that allows remote attackers to obtain the database password. The root cause involves how the password is seeded as a console parameter, combined with misconfigurations around External Node Classifiers and lack of acce...

CVE-2012-4967

CVE-2012-6571 describes a flaw in the HTTP module of Huawei AR routers and related S-series switches (models S2000, S3000, S3500, S3900, S5100, S5600, S7800) where the Branch Intelligent Management System (BIMS) web components use predictable Session ID values. This enables remote attackers to hi...