84 matches found
CVE-2017-10958
Foxit Reader 8.3.1.21155 is affected by CVE-2017-10958. The flaw resides in the value attribute of Field objects and stems from not validating the existence of an object before performing operations, enabling remote code execution when a user visits a malicious page or opens a malicious file. Imp...
CVE-2017-10958
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the val...
CVE-2011-4980
This CVE-2011-4980 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-4980
EMC Isilon OneFS is affected by a path traversal vulnerability. Affected versions are 7.1.0–7.1.1.10, 7.2.0–7.2.1.3, and 8.0.0–8.0.0.1. The provided documents describe the issue as a directory/path traversal that could compromise the system, but do not include explicit root-cause details, vulnera...
Fedora 23 : xguest (2016-2a66f41200)
Security fix for CVE-2016-4980 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
Fedora 24 : xguest (2016-372b6f936e)
Security fix for CVE-2016-4980 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...
Fedora Update for xguest FEDORA-2016-2a66f41200
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-4980
A password generation weakness exists in xquest through 2016-06-13...
CVE-2015-4980
IBM WebSphere Commerce 7.0.0.6–7.0.0.9 reportedly has an unspecified vulnerability allowing remote authenticated users to obtain sensitive personal data via unknown vectors. Related connected data mentions a "Code injection" characterization, but the provided documents do not supply concrete expl...
F5 Networks BIG-IP : Python vulnerability (K16398)
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts. CVE-2006-4980 Impact An attacker may be able to...
KLA10269 OSI vulnerability in Nessus
An unspecified vulnerability was found in Nessus. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely at a point related to Web UI. Original advisories - Exploitation Public exploits exist for this vulnerability. Related...
CVE-2014-4980
The CVE-2014-4980 entry affects Tenable Nessus/Web UI, specifically Nessus versions 5.2.3–5.2.7. The issue is an information-disclosure vulnerability in the Web UI: the /server/properties endpoint can disclose sensitive data via the token parameter due to insufficient parameter checking. Reported...
CVE-2014-4980 Parameter Tampering in Nessus Web UI - Remote Information Disclosure
Product: Nessus Vendor: Tenable Network Security? Version: Nessus 5.2.3-5.2.7 - Web UI 2.3.4 potentially lower Vendor Notified Date: June 24, 2014 Vendor Resolved Date: June 25, 2014 Release Date: July 18, 2014 Risk: Medium Authentication: Not Required Remote: Yes Description: A parameter tamperi...
Tenable Nessus 5.2.7 Parameter Tampering / Authentication Bypass
Product: Nessus Vendor: Tenable Network Security Version: Nessus 5.2.3-5.2.7 - Web UI 2.3.4 potentially lower Vendor Notified Date: June 24, 2014 Vendor Resolved Date: June 25, 2014 Release Date: July 18, 2014 Risk: Medium Authentication: Not Required Remote: Yes Description: A parameter tamperi...
AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities
No description provided by source. Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ AVTECH DVR multiple vulnerabilities 1. Advisory Information Title: AVTECH DVR multiple vulnerabilities Advisory ID: CORE-2013-0726 Advisory URL:...
Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free Vulnerability
No description provided by source. !/usr/bin/perl Title: Native Instruments Massive 1.1.4 KSD File Handling Use-After-Free Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 1.1.4 R1901 Summary: MASSIVE is a sonic monster ? the...
CVE-2013-4980
The CVE-2013-4980 family affects AVTECH AVN801 DVR devices (firmware 1017-1003-1009-1003 and possibly older). A buffer overflow in the RTSP packet handler (CVE-2013-4980) can be triggered remotely via a long URI in an RTSP SETUP request, potentially causing a device crash or remote code execution...
AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities
Multiple vulnerabilities have been found in AVTECH AVN801 DVR and potentially other devices sharing the affected firmware that could allow a remote attacker to exploit multiple buffer overflows resulting in arbitrary code execution or bypass CAPTCHA functionality for logging into the administrati...
AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities
AVTECH DVR Firmware 1017-1003-1009-1003 - Multiple Vulnerabilities Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ AVTECH DVR multiple vulnerabilities 1. Advisory Information Title: AVTECH DVR multiple vulnerabilities Advisory ID: CORE-2013-0726 Advisory URL:...
