72 matches found
CVE-2023-4990
Directory traversal vulnerability in MCL-Net versions prior to 4.6 Update Package P01 may allow attackers to read arbitrary files...
CVE-2023-4990
Directory traversal vulnerability in MCL-Net versions prior to 4.6 Update Package P01 may allow attackers to read arbitrary files...
CVE-2023-4990
CVE-2023-4990 affects MCL-Net before 4.6 Update Package (P01). The vulnerability is a directory traversal flaw that may allow an attacker to read arbitrary files on the server. Connected sources corroborate this issue across Red Hat, JVn, NVD, and other feeds, consistently citing the same scope: ...
CVE-2023-4990
Directory traversal vulnerability in MCL-Net versions prior to 4.6 Update Package P01 may allow attackers to read arbitrary files...
Debian: Security Advisory (DSA-1385-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AlmaLinux 9 : cups (ALSA-2022:4990)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:4990 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. T...
Important: Red Hat Security Advisory: cups security update
An update for cups is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Ubuntu 18.04 LTS / 20.04 LTS : Nettle vulnerabilities (USN-4990-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4990-1 advisory. It was discovered that Nettle incorrectly handled RSA decryption. A remote attacker could possibly use this issue to cause Nettle to crash,...
CVE-2020-4990
CVE-2020-4990 affects IBM Security Guardium 11.2 (and 11.3). The vulnerability is an SQL injection in Guardium, allowing a remote attacker to view, add, modify, or delete data in the back-end database. The IBM bulletin states that Guardium has fixed this vulnerability, listing affected versions (...
RHEL 7 : kernel (RHSA-2020:4990)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4990 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: bluetooth: information leak when...
CVE-2019-4990
This CVE entry is rejected and does not represent an active vulnerability entry.
CVE-2018-4990
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...
CVE-2018-4990
Adobe Acrobat and Reader (various 2015–2018 era builds) contain a Double Free vulnerability in the JavaScript engine that could allow arbitrary code execution in the context of the current user when exploited. Affected versions include 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2...
CVE-2018-4990
Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Double Free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...
Security Bulletin: IBM Tealeaf Customer Experience allows user authentication via unencrypted GET request (CVE-2015-4990)
Summary The IBM Tealeaf Customer Experience portal allows a user to authenticate via means that could result in exposure of credentials. Vulnerability Details CVEID: CVE-2015-4990 DESCRIPTION: The IBM Tealeaf Customer Experience could allow a local privileged user to obtain the authentication...
CVE-2018-4990 Adobe Reader code execution exploit analysis-exploit warning-the black bar safety net
2018 5 on 15 September, ESET released the article“A tale of two zero-days”, the article disclosed this year 3 month ESET in malware scan engine VirusTotal on the capture of the one used to attack the test PDF document. The PDF document contains a sample of two pieces of 0-day Vulnerability,...
Adobe Reader zero-day discovered alongside Windows vulnerability
During the first half of 2018, we have witnessed some particularly interesting zero-day exploits, including one for Flash CVE-2018-4878 and more recently for Internet Explorer CVE-2018-8174. The former was quickly used by exploit kits such as Magnitude, while it is only a matter of time before we...
CVE-2018-4990
creationtimestamp| type| source ---|---|--- 2018-05-15 15:30:45+00:00| seen| MISP/5afafce0-0598-4ca0-b52a-41f4950d210f 2018-05-16 15:25:03+00:00| seen| https://t.me/informationsecuritychannel/17217 2018-07-03 12:27:59+00:00| seen| MISP/5b3b6b45-1890-40d0-9344-ab9102de0b81 2018-07-04 08:11:12+00:0...
Adobe Reader 2017 Security Updates (APSB18-09) - Windows
Adobe Reader 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...