82 matches found
Fedora 24 : xen (2016-cfea37952b)
cleaner way to set kernel module load list Unrestricted qemu logging XSA-180, CVE-2014-3672 1339125 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in espregwrite CVE-2016-4439 1337502 Qemu: scsi: esp: OOB write while writing to 's-cmdbuf' in getcmd CVE-2016-4441 1337505 Qemu: scsi: megasa...
Fedora Update for qemu FEDORA-2016-a80eab65ba
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for xen FEDORA-2016-8d3fe9914b
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Impero Education Pro classroom management software vulnerable to remote code execution
Overview Impero Software Education Pro classroom management software is vulnerable to remote code execution via improper encryption and authentication mechanisms. Description CWE-321: Use of Hard-coded Cryptographic KeyCWE-329: Not Using a Random IV with CBC Mode - CVE-2015-5997 According to the...
Adobe Reader < 2015.006.30060 / 2015.008.20082 Multiple Vulnerabilities (APSB15-15)
The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30060 or 2015.008.20082. It is, therefore, affected by multiple vulnerabilities. - Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before...
Heap overflow
Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via...
CVE-2015-5105
Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via...
CVE-2015-5105
Adobe Reader and Acrobat for Windows and macOS are affected by CVE-2015-5105 (Heap-based memory corruption). The issue arises while converting PCX to PDF, as described by advisories, leading to a remote code execution possibility. Affected products/versions include: Adobe Reader/Acrobat 10.x befo...
CVE-2014-5105
The CVE-2014-5105 entry concerns OL-Commerce 2.1.1 with two reflected XSS vectors: (1) a_country in process action to affiliate_signup.php and (2) entry_country_id in edit action to admin/create_account.php. The underlying issue is cross-site scripting due to unsanitized input in these parameters...
openSUSE Security Update : blender (openSUSE-SU-2013:0302-1)
This update fixes tmp races in the undo save quit Blender routine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-121. The text description of this plugin is C SUSE LLC...
CVE-2010-5105
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103...
CVE-2010-5105
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103...
CVE-2010-5105
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103...
CVE-2010-5105
CVE-2010-5105 concerns Blender’s undo/quit routine (kernel level) affecting Blender versions 2.5, 2.63a and earlier. The issue allows a local attacker to overwrite arbitrary files via a symlink attack on the temporary quit.blend file, indicating a local privilege/impact vector. The root cause is ...
CVE-2012-5105
CVE-2012-5105 affects SQLiteManager 1.2.4 and involves multiple cross-site scripting (XSS) vulnerabilities. Vulnerability details from connected sources show that remote attackers can inject arbitrary web script or HTML via the dbsel parameter to main.php or index.php, or via the nsextt parameter...
Subrion CMS 2.2.1 Cross Site Scripting
Subrion CMS 2.2.1 Multiple Remote XSS POST Injection Vulnerabilities Vendor: Intelliants LLC Product web page: http://www.subrion.com Affected version: 2.2.1 Summary: Subrion is a free open source content management system. It's written in PHP 5 and utilizes MySQL database. Subrion CMS can be...
Subrion CMS 2.2.1 Multiple Remote XSS POST Injection Vulnerabilities
Summary Subrion is a free open source content management system. It's written in PHP 5 and utilizes MySQL database. Subrion CMS can be easily integrated into your current website or used as a stand alone platform. It's extremely flexible and scalable php system that stands for a content managemen...
CVE-2011-5105
CVE-2011-5105 affects ManageEngine ADSelfService Plus 4.5 Build 4521, with XSS in EmployeeSearch.cc exploited via searchType and searchString parameters. Root cause: insufficient input sanitization leading to arbitrary script/HTML execution in a user session. Impact: remote attacker could inject ...
CVE-2008-5105
Sami FTP Server 2.0.x is vulnerable to remote denial of service through multiple FTP commands, including MKD, APPE, CWD, DELE, RMD, RETR, RNFR, RNTO, SIZE, and STOR. OpenVAS entries describe a buffer overflow specifically for the MKD command and a general remote DoS condition, while the NVD entry...