79 matches found
CVE-2019-4988
CVE-2019-4988 is rejected and not used; not an active vulnerability entry.
Security Bulletin: IBM Tealeaf Customer Experience allows unauthorized access to system files (CVE-2015-4988)
Summary The IBM Tealeaf Customer Experience replay server could allow an attacker to traverse directories and read any file on the Windows Server system hosting the server. Vulnerability Details CVEID: CVE-2015-4988 DESCRIPTION: The IBM Tealeaf Customer Experience replay server could allow an...
Adobe Acrobat 2017 Security Updates (APSB18-09) - Windows
Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
Adobe Acrobat 2017 Security Updates (APSB18-09) - Mac OS X
Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
CVE-2017-4988
CVE-2017-4988 affects EMC Isilon OneFS, including versions 8.0.1.0, 8.0.0–8.0.0.3, 7.2.0–7.2.1.4 and 7.1.x. The vulnerability is described as a privilege escalation that could allow an attacker to compromise the affected system. Multiple sources (NVD, CVE lists, and related vulnerability database...
EMC Isilon OneFS Privilege Escalation Vulnerability
EMC Isilon OneFS is affected by a privilege escalation vulnerability that could potentially be exploited by attackers to compromise the affected system. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2011-4988
This CVE-2011-4988 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-4988
Cross-site scripting XSS vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter...
CVE-2016-4988
CVE-2016-4988 describes a Cross-site scripting (XSS) vulnerability in the Jenkins Build Failure Analyzer plugin prior to version 1.16.0. The issue arises in the plugin’s handling of an unspecified parameter, allowing remote attackers to inject arbitrary web script or HTML. The impact is limited t...
CVE-2016-4988
Cross-site scripting XSS vulnerability in the Build Failure Analyzer plugin before 1.16.0 in Jenkins allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter...
CVE-2015-4988
CVE-2015-4988 affects IBM Tealeaf Customer Experience replay server. A directory traversal vulnerability in affected 8.x/9.x releases enables remote attackers to read arbitrary files on Windows Server hosting the replay server. IBM lists multiple remedial versions (up to 9.0.2A/9.0.2 and correspo...
Oracle: Security Advisory (ELSA-2008-0145)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-4988
XnView 1.99 and 1.99.1 are affected by a heap-based buffer overflow in the xjpegls.dll (JPEG-LS) plugin when processing crafted JLS images, enabling remote code execution. The vulnerability arises during JLS decompression in the XnView Formats PlugIn; PoCs and exploits exist (e.g., for XnView 1.9...
IcoFX - Stack Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::FILEFORMAT def initializeinfo =...
IcoFX ICO处理缓冲区溢出漏洞
BUGTRAQ ID：64221 CVE ID：CVE-2013-4988 IcoFX是一款免费的图标设计编辑工具。 IcoFX在读取ICONDIRENTRY结构时存在一个边界错误，允许攻击者利用漏洞构建恶意ICO文件，如ICONDIR结构中包含超大"idCount"值，诱使用户解析，可触发基于栈的缓冲区溢出。远程攻击者可以利用漏洞可使应用程序崩溃或可执行任意代码。 0 IcoFX IcoFX 2.5 目前没有详细解决方案提供： http://www.icofx.ro/ This module requires Metasploit:...
IcoFX 2.1 (.ico) - Stack Buffer Overflow
This Metasploit module exploits a stack-based buffer overflow vulnerability in version 2.1 of IcoFX. The vulnerability exists while parsing .ICO files, where an specially crafted ICONDIR header, providing an arbitrary long number of images into the file, can be used to trigger the overflow when...
CVE-2013-4988
CVE-2013-4988 : A stack-based buffer overflow in IcoFX 2.5 and earlier occurs while parsing ICO files, via a long idCount in an ICONDIR header. Public exploit details show this can enable remote code execution, with variants such as IcoFX 2.6 demonstrating SEH/DEP bypass using a JOP chain (noted ...
CVE-2013-4988
creationtimestamp| type| source ---|---|--- 2013-12-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30208 2014-01-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30788 2018-05-29 15:50:33+00:00| seen|...
IcoFX 2.5.0.0 - '.ico' Buffer Overflow (PoC)
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ IcoFX Buffer Overflow Vulnerability PoC: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30208.zip 1. Advisory Information Title: IcoFX Buffer Overflow Vulnerability Advisory ID: CORE-2013-1107...