Design/Logic Flaw

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to bypass intended access restrictions and obtain sensitive...

CVE-2015-5092

Technical details about CVE-2015-5092 are not publicly available in the provided Connected documents. Monitor for updates.

KLA10628 Multiple vulnerabilities in Adobe Acrobat

Multiple serious vulnerabilities have been found in Adobe Acrobat. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1...

CVE-2013-5092

CVE-2013-5092 is a reported XSS vulnerability in the file afa/php/Login.php of AlgoSec Firewall Analyzer 6.1-b86 . The vulnerability allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter. The NVD entry lists a Medium base score (CVSS 2.0: 4.3) with network att...

CVE-2013-5092

creationtimestamp| type| source ---|---|--- 2013-08-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38692...

CVE-2012-5092

CVE-2012-5092 affects Oracle Agile PLM for Process within Oracle Supply Chain Products Suite (versions 5.2.2 and 6.1.0.0). The vulnerability is described as unspecified, allowing remote authenticated users to impact confidentiality and integrity via unknown vectors related to Supply Chain Relatio...

CVE-2010-5092

The CVE-2010-5092 issue affects SilverStripe 2.4.0 where the Add Member dialog stores passwords in plain text, enabling local information disclosure by reading the database. Root cause: plaintext password storage. Remediation: upgrade to a fixed release (e.g., SilverStripe 2.4.1) as indicated by ...

pyrocms 2.1.1 - Multiple Vulnerabilities

pyrocms 2.1.1 - Multiple Vulnerabilities PyroCMS 2.1.1 CRLF Injection And Stored XSS Vulnerability Vendor: HappyNinjas Ltd Product web page: http://www.pyrocms.com Affected version: 2.1.1 Community Summary: PyroCMS is a CMS built using the CodeIgniter PHP framework. Using an MVC architecture it w...

CVE-2011-5092

Best Practical Solutions RT 3.8.x before 3.8.12 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code and gain privileges via unspecified vectors, a different vulnerability than CVE-2011-4458 and CVE-2011-5093...

CVE-2011-5092

Best Practical Solutions RT 3.8.x before 3.8.12 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code and gain privileges via unspecified vectors, a different vulnerability than CVE-2011-4458 and CVE-2011-5093...

CVE-2011-5092

CVE-2011-5092 affects Best Practical Solutions RT 3.8.x prior to 3.8.12 and RT 4.x prior to 4.0.6. The vulnerability is described as an unspecified flaw that allows remote attackers to execute arbitrary code and gain privileges; a different issue from CVE-2011-4458 and CVE-2011-5093. The connecte...

CVE-2009-5092

Cross-site scripting XSS vulnerability in the management interface in Microsoft FAST ESP 5.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-5092

CVE-2009-5092 is a cross-site scripting (XSS) vulnerability in the Microsoft FAST ESP management interface, affecting FAST ESP 5.1.5 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially executing in the victim’s browser. Affect...

Novell eDirectory Multiple Vulnerabilities Nov08 - (Windows)

This host is running Novell eDirectory and is prone to Multiple Vulnerabilities. OpenVAS Vulnerability Test $Id: gbnovelledirmultvulnnov08win.nasl 5370 2017-02-20 15:24:26Z cfi $ Novell eDirectory Multiple Vulnerabilities Nov08 - Windows Authors: Veerendra GG Copyright: Copyright c 2008 Greenbone...

CVE-2008-5092

CVE-2008-5092 corresponds to a heap-based buffer overflow in Novell eDirectory’s HTTPSTK (HTTP protocol stack) prior to 8.8 SP3. The NVD entry notes unknown impact and attack vectors tied to the HTTP language header and HTTP content-length header. CVSS v2 base score is 10.0 (AV:N/AC:L/Au:N/C:C/I:...

CVE-2007-5092

Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in an ACCEPTFILE array parameter to modules.php...

CVE-2007-5092

Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in an ACCEPTFILE array parameter to modules.php...

CVE-2006-5092

PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL in the navigationstart parameter...

CVE-2006-5092

CVE-2006-5092 and related CVEs describe PHP remote file inclusion (RFI) vulnerabilities in A-Blog 2. CVE-2006-5092 affects navigation/menu.php, allowing an attacker to trigger code execution by supplying a URL in the navigation_start parameter. CVE-2006-5135 expands to multiple RFI vectors across...

CVE-2006-5092

PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL in the navigationstart parameter...