Fedora 23 : roundcubemail (2016-396403ec02)

Upstream announcement: Roundcube Webmail 1.2.0 released Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora Update for roundcubemail FEDORA-2016-396403ec02

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for roundcubemail FEDORA-2016-e4c559515c

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Reader < 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-15)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30060 or 2015.008.20082. It is, therefore, affected by multiple vulnerabilities. - Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before...

Memory corruption

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory...

CVE-2015-5103

Adobe Reader/Acrobat on Windows and macOS (Adobe Reader 10.x up to 10.1.15 and 11.x up to 11.0.12; Acrobat/Acrobat Reader DC Classic before 2015.006.30060; DC Continuous before 2015.008.20082) are affected by CVE-2015-5103. The description notes arbitrary code execution or a memory corruption-bas...

CVE-2015-3095

Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory...

ManageEngine EventLog Analyzer 'j_username' Parameter XSS Vulnerability

ManageEngine EventLog Analyzer is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2014-5103

CVE-2014-5103 affects ZOHO ManageEngine EventLog Analyzer 9 (build 9000). The vulnerability is a cross-site scripting (XSS) flaw where an attacker can inject arbitrary HTML/script via the j_username parameter to event/j_security_check due to insufficient input sanitization. The issue is fixed in ...

CVE-2014-5103

Cross-site scripting XSS vulnerability in ZOHO ManageEngine EventLog Analyzer 9 build 9000 allows remote attackers to inject arbitrary web script or HTML via the jusername parameter to event/jsecuritycheck. Fixed in Version 10 Build 10000...

Express Burn Plus 4.58 - EBP Project File Handling Buffer Overflow PoC

No description provided by source. !/usr/bin/perl Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.58 Summary: Express Burn is a program that allows you to create and copy many kinds of disc...

TYPO3 Multiple Vulnerabilities (Dec 2010)

TYPO3 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3"; ifdescription...

CVE-2012-5103

Vulnerability summary (CVE-2012-5103): Multiple cross-site scripting (XSS) flaws exist in the action/add-submit.php endpoint of Ggb Guestbook 0.3.1. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the (1) url or (2) message parameters. No further technical de...

Express Burn Plus 4.58 - EBP Project File Handling Buffer Overflow (PoC)

!/usr/bin/perl Express Burn Plus v4.58 EBP Project File Handling Buffer Overflow PoC Vendor: NCH Software Product web page: http://www.nchsoftware.com Affected version: 4.58 Summary: Express Burn is a program that allows you to create and copy many kinds of disc media, including Audio audio CDs /...

CVE-2011-5103

SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2011-5103

The CVE-2011-5103 entry describes an SQL injection in the Alurian Prismotube PHP Video Script, exploitable via the id parameter to index.php. The root cause is unsanitized input being used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. Documented impact indicates pot...

CVE-2010-5103

SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-5103

CVE-2010-5103 describes an SQL injection in the TYPO3 web CMS. The affected versions are TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5. The vulnerability resides in the TYPO3 List module and, per the description, allows remote authenticated users with certain permissions t...

SuSE 11.1 Security Update : Xorg X11 (SAT Patch Number 5103)

Specially crafted font files could cause a buffer overflow in applications that use libXfont to load such files. CVE-2011-2895 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itsel...

CVE-2009-5103

The CVE-2009-5103 entry concerns ATCOM Netvolution 1.0 ASP with a Cross-Site Scripting (XSS) vulnerability exploitable via the email variable. Connected sources corroborate an XSS condition but do not provide concrete remediation steps, affected software versions beyond 1.0 ASP, or exploit status...