CVE-2015-5110

CVE-2015-5110 is a stack-based buffer overflow in Adobe Reader/Acrobat affecting 10.x before 10.1.15 and 11.x before 11.0.12, plus Acrobat/Reader DC Classic before 2015.006.30060 and DC Continuous before 2015.008.20082 on Windows and OS X. The root cause is a stack/boundary overflow in the affect...

CVE-2015-5110

Stack-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via...

KLA10628 Multiple vulnerabilities in Adobe Acrobat

Multiple serious vulnerabilities have been found in Adobe Acrobat. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1...

CVE-2010-5110

The CVE-2010-5110 entry applies to Poppler’s DCTStream.cc, vulnerable in versions before 0.13.3. The provided documents state that a crafted PDF file can cause a denial of service (crash) via this component. No explicit exploitation details or affected product versions beyond “before 0.13.3” are ...

CVE-2010-5110

DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service crash via a crafted PDF file...

CVE-2010-5110

DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service crash via a crafted PDF file...

CVE-2014-5110

Cross-site scripting XSS vulnerability in user/help/html/index.php in Fonality trixbox allows remote attackers to inject arbitrary web script or HTML via the idnodo parameter...

CVE-2014-5110

The CVE-2014-5110 entry describes a Cross-site scripting (XSS) vulnerability in Fonality trixbox, specifically affecting the file user/help/html/index.php and exploitable via the id_nodo parameter. Connected documents confirm the vulnerability type and affected component, with CVSS metrics indica...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Google Chrome < 22.0.1229.92 Multiple Vulnerabilities

Binary data 800947.prm...

CVE-2012-5110

Chromium/Chrome is affected by CVE-2012-5110 (out-of-bounds read in the compositor leading to a DoS). The Gentoo GLSA 201210-07 lists this CVE among multiple Chromium vulnerabilities and Resolution: upgrade to www-client/chromium-22.0.1229.94 or newer to mitigate. Other connected advisories refer...

CVE-2012-5110

Removed by vendor...

FreeBSD : chromium -- multiple vulnerabilities (e6161b65-1187-11e2-afe3-00262d5ed8ee)

Google Chrome Releases reports : 138208 High CVE-2012-2900: Crash in Skia text rendering. Credit to Atte Kettunen of OUSPG. 147499 Critical CVE-2012-5108: Race condition in audio device handling. Credit to Atte Kettunen of OUSPG. 148692 Medium CVE-2012-5109: OOB read in ICU regex. Credit to Arthu...

Stable Channel Update

The Stable channel has been updated to 22.0.1229.92 for Windows, Mac, and Linux. This update contains a number of stability fixes, including an issue with multiple profiles on Mac OS X 10.8.2. It also contains a fix for text display on the Mac, as well as the security updates listed below. Securi...

Oracle Identity Management 10g Cross Site Scripting

Oracle Identity Management 10g username XSS POST Injection Vulnerability form name="XSS" method="P...

CVE-2011-5110

CVE-2011-5110 involves multiple SQL injection vulnerabilities in Blogs Manager (version 1.101 and earlier). The underlying issue is improper handling of the SearchField parameter during a search action, allowing remote attackers to inject SQL via endpoints such as _authors_list.php, _blogs_list.p...

CVE-2009-5110

CVE-2009-5110 affects dhttpd and allows remote attackers to cause a denial of service (daemon outage) by sending partial HTTP requests, demonstrated by Slowloris. Public records from multiple sources (NVD, Red Hat, Ubuntu, CVE list, etc.) confirm the DoS impact via incomplete/slow HTTP requests, ...

Code injection

Cisco Unified Videoconferencing UVC System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043...

CVE-2010-4303

CVE-2010-4303 affects Cisco Unified Videoconferencing (UVC) System 5110 and 5115 when running Linux. The root cause described in the sources is that /etc/shadow is world-readable, enabling local users to read encrypted password hashes. This is a local disclosure vulnerability as stated. The conne...

CVE-2010-3037

CVE-2010-3037 affects Cisco Unified Videoconferencing (UVC) products (5110/5115 Linux; 3545, 5230 VxWorks; 3527 PRI Gateway; 3522 BRI Gateway; 3515 MCU). The flaw is a remote command-injection in the web interface via the /goform/websXMLAdminRequestCgi.cgi, allowing an authenticated administrator...