73 matches found
CVE-2017-16586
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2017-16586
CVE-2017-16586 affects Foxit Reader 8.3.2.25013 (Windows) with a use-after-free-like flaw in addAnnot that fails to validate object existence before performing operations, enabling remote code execution under the current process when a user opens a malicious page or file. Exploitation requires us...
Mozilla Firefox < 50.0 Multiple Vulnerabilities
The version of Mozilla Firefox installed on the remote Windows host is prior to 50.0. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these vulnerabilities by convincing a user...
Fedora 23 : openstack-heat-2015.1.2-2.fc23 (2016-fe5b9da308)
Backport of the patch for CVE-2015-5295 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
CVE-2015-5295
The template-validate command in OpenStack Orchestration API Heat before 2015.1.3 kilo and 5.0.x before 5.0.1 liberty allows remote authenticated users to cause a denial of service memory consumption or determine the existence of local files via the resource type in a template, as demonstrated by...
CVE-2015-5295
CVE-2015-5295 affects OpenStack Heat’s template-validate command. A remote authenticated user can abuse the template validation path to cause memory exhaustion (DoS) or to determine the existence of local files via the resource type in a template, demonstrated by file:///dev/zero. Affected softwa...
Art Systems FluidDraw P5/S5 5.3n Binary Planting Arbitrary Code Execution
/ Art Systems FluidDraw P5/S5 5.3n Binary Planting Arbitrary Code Execution Vendor: Art Systems Software GmbH | Festo AG & Co. KG Product web page: http://www.art-systems.com | https://www.festo.com Affected version: FluidDraw S5 Starter 5.3n 5.3.385.0 FluidDraw P5 Professional 5.3n 5.3.385.0...
Fedora 22 : xen-4.5.0-7.fc22 (2015-5295)
Long latency MMIO mapping operations are not preemptible XSA-125, CVE-2015-2752 Unmediated PCI command register access in qemu XSA-126, CVE-2015-2756 Certain domctl operations may be abused to lock up the host XSA-127, CVE-2015-2751 Note that Tenable Network Security has extracted the preceding...
CVE-2011-5295
Buffer overflow in the Download method in a certain ActiveX control in MDIEEx.dll in Gogago YouTube Video Converter 1.1.6 allows remote attackers to execute arbitrary code via a long argument...
CVE-2011-5295
Affected product: Gogago YouTube Video Converter, version 1.1.6. The issue is a buffer overflow in the MDIEEx.dll ActiveX control’s Download method, allowing remote code execution via a long argument. This vulnerability is reported consistently across multiple sources (NVD, Red Hat, CNVD, CVE lis...
CVE-2010-5295
Cross-site scripting XSS vulnerability in wp-admin/plugins.php in WordPress before 3.0.2 might allow remote attackers to inject arbitrary web script or HTML via a plugin's author field, which is not properly handled during a Delete Plugin action...
CVE-2010-5295
Cross-site scripting XSS vulnerability in wp-admin/plugins.php in WordPress before 3.0.2 might allow remote attackers to inject arbitrary web script or HTML via a plugin's author field, which is not properly handled during a Delete Plugin action...
CVE-2010-5295
CVE-2010-5295 affects WordPress prior to 3.0.2 and is caused by improper handling of a plugin author field in wp-admin/plugins.php during the Delete Plugin action, enabling cross-site scripting (XSS). The vulnerability impact is description-only in the provided sources, with no explicit exploitat...
CVE-2010-5295
Cross-site scripting XSS vulnerability in wp-admin/plugins.php in WordPress before 3.0.2 might allow remote attackers to inject arbitrary web script or HTML via a plugin's author field, which is not properly handled during a Delete Plugin action...
CVE-2012-5295
CVE-2012-5295 is an XSS vulnerability in FuseTalk Forums (
CVE-2012-5295
creationtimestamp| type| source ---|---|--- 2012-01-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36485...
Novell iManager < 2.7 SP3 eDirectory Plugin Buffer Overflow Vulnerability
Binary data 5295.prm...
SLES9: Security update for clamav
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: clamav For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5010212 within the SuSE...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5295)
Specially crafted files could crash the bzip2-decoder. CVE-2008-1372 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41482; scriptversion"1.11";...
