CVE-2016-4978

CVE-2016-4978 affects Apache ActiveMQ Artemis (JMS ObjectMessage getObject) where deserialization of untrusted input can occur via gadget classes on Artemis classpath. Affected components include the JMS Core client, Artemis broker, and Artemis REST component in Artemis before 1.4.0. Successful e...

Fedora 22 : rawstudio-2.1-0.1.20150511git983bda1.fc22 (2015-8196)

Rawstudio from github https://github.com/rawstudio/rawstudio/ . Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...

CVE-2013-4978

CVE-2013-4978 affects Aloaha PDF Viewer (AloahaPDFViewer v5.0.0.7 and likely older) and Aloaha PDF Suite FREE. The vulnerability is a stack-based buffer overflow in PDF processing that can allow remote code execution via a crafted PDF file. CoreLabs CORE-2013-0805 describes the vulnerability and ...

Aloaha PDF Suite Buffer Overflow Vulnerability

Advisory ID Internal CORE-2013-0805 1. Advisory Information Title: Aloaha PDF Suite Buffer Overflow Vulnerability Advisory ID: CORE-2013-0805 Advisory URL:http://www.coresecurity.com/advisories/aloaha-pdf-suite-buffer-overflow-vulnerability Date published: 2013-08-28 Date of last update:...

CVE-2013-4978

creationtimestamp| type| source ---|---|--- 2013-08-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38742...

CVE-2009-4978

Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2009-4978

MyBackup 1.4.0 is affected by a directory traversal vulnerability in down.php that allows reading arbitrary files via a .. in the filename parameter. The OpenVAS entry describes multiple vulnerabilities in MyBackup 1.4.0, including this directory traversal and an arbitrary PHP code execution path...

CVE-2009-4978

Directory traversal vulnerability in down.php in MyBackup 1.4.0 allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2010-4978

creationtimestamp| type| source ---|---|--- 2010-06-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34220...

CVE-2008-4978

CVE-2008-4978 concerns Radiance 3R9+20080530. It describes a local privilege issue where an attacker could overwrite arbitrary files by exploiting a symlink race on temporary files (examples: /tmp/opt.fmt, /tmp/out#####.fmt, /tmp/tf#####.dat, /tmp/gsf#####, /tmp/sc#####.sh, /tmp/il#####.pic, /tmp...

SuSE 10 Security Update : boost (ZYPP Patch Number 4978)

Certain regular expressions could cause the boost library to crash. CVE-2008-0171 / CVE-2008-0172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid31452;...

CVE-2007-4978

CVE-2007-4978 affects phpSyncML 0.1.2 and earlier. The vulnerability is a PHP remote file inclusion in WBXML/Decoder.php and WBXML/Encoder.php triggered by supplying a URL in the base_dir parameter, enabling remote attackers to execute arbitrary PHP code. The CVSS metrics indicate network access,...