62 matches found
Adobe Reader < 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)
The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30094 or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and...
Design/Logic Flaw
Use-after-free vulnerability in the popUpMenuEx method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to...
Design/Logic Flaw
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via...
Design/Logic Flaw
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via ...
Design/Logic Flaw
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via ...
CVE-2015-5586
Technical details for CVE-2015-5586 are not publicly available in the provided documents. No explicit information on affected products, root cause, impact, or remediation is given. Monitor for updates.
CVE-2014-5586
The CVE-2014-5586 entry applies to the BIATNET Android app (package com.biatnet.mobile), version 1.1, which does not verify X.509 certificates from SSL servers. This certificate validation failure enables MITM attackers to spoof servers and read sensitive data via crafted certificates. The connec...
Cross-Site Scripting (XSS) in WikkaWiki
Advisory ID: HTB23170 Product: WikkaWiki Vendor: Wikka Development Team Vulnerable Versions: 1.3.4 and probably prior Tested Version: 1.3.4 Vendor Notification: August 21, 2013 Vendor Patch: August 31, 2013 Public Disclosure: September 11, 2013 Vulnerability Type: Cross-Site Scripting CWE-79 CVE...
CVE-2013-5586
Cross-site scripting XSS vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote attackers to inject arbitrary web script or HTML via the wakka parameter to sql/...
CVE-2013-5586
CVE-2013-5586 affects WikkaWiki (versions up to 1.3.4, patched as 1.3.4-p1). The issue is a Cross-Site Scripting (XSS) vulnerability in the wikka.php handler, caused by insufficient sanitisation of the GET parameter "wakka" passed to "/sql/". This allows remote attackers to inject arbitrary scrip...
WikkaWiki 1.3.4 Cross Site Scripting Vulnerability
WikkaWiki version 1.3.4 suffers from a cross site scripting vulnerability. Vendor: Wikka Development Team Vulnerable Versions: 1.3.4 and probably prior Tested Version: 1.3.4 Vendor Notification: August 21, 2013 Vendor Patch: August 31, 2013 Public Disclosure: September 11, 2013 Vulnerability Type...
WikkaWiki 1.3.4 Cross Site Scripting
Advisory ID: HTB23170 Product: WikkaWiki Vendor: Wikka Development Team Vulnerable Versions: 1.3.4 and probably prior Tested Version: 1.3.4 Vendor Notification: August 21, 2013 Vendor Patch: August 31, 2013 Public Disclosure: September 11, 2013 Vulnerability Type: Cross-Site Scripting CWE-79 CVE...
CVE-2012-5586
The Drupal Services module (versions 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3) is affected. Remote authenticated users who have the "access user profiles" permission can disclose arbitrary users’ email addresses via the user index method and the path to the user resource. This is caused ...
SA-CONTRIB-2012-168 - Services - Information Disclosure
This module enables you to access content from a remote client. The module doesn't sufficiently adhere to standard Drupal permissions and exposes users emails via the user index method. This vulnerability is mitigated by the fact that an attacker most know the path to the user resource and must b...
SuSE 11.1 Security Update : pidgin (SAT Patch Number 5586)
Remote users could have crashed pidgin via ICQ, SILC, XMPP and Yahoo protocols CVE-2011-4601 / CVE-2011-4603 / CVE-2011-4602 / CVE-2011-1091. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 1...
Microsoft Windows GDI Multiple Vulnerabilities (925902)
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service persistent reboot via a large length value in the second or later anih block of a RIFF .ANI, cur, or .ico file, which...
CVE-2008-5586
CVE-2008-5586 describes a SQL injection in the application "Check Up New Generation (Check New) 4.52" via the search parameter in the file findoffice.php when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to execute arbitrary SQL commands, indicating potential impact to ...
CVE-2008-5586
creationtimestamp| type| source ---|---|--- 2008-12-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7328...
CVE-2007-5586
...
CVE-2007-5586
CVE-2007-5587 describes a local elevation of privilege in the Macrovision SafeDisc driver (secdrv.sys). The vulnerability exists in how the driver handles configuration parameters and is exploitable via a crafted argument to a METHOD_NEITHER IOCTL, allowing a local attacker to execute arbitrary c...