46 matches found
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2018-9958
Foxit Reader 9.0.1.1049 is affected by CVE-2018-9958, a Use-After-Free in the Text Annotations handling that can lead to remote code execution. The flaw occurs when setting the point attribute of an annotation object without validating existence, allowing an attacker to run code in the victim pro...
CVE-2018-9958
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2017-5620
CVE-2017-5620 (Zammad XSS) is corroborated by connected sources as a cross-site scripting vulnerability in Zammad. Affected versions are before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, with the issue arising because attachments are opened in a new tab instead of downloading, creating an...
CVE-2016-5620
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to INFRA, a different...
CVE-2016-5620
The CVE-2016-5620 entry concerns Oracle FLEXCUBE Universal Banking in Oracle Financial Services Applications (versions 11.3.0, 11.4.0, 12.0.1–12.0.3, 12.1.0, 12.2.0). The vulnerability is described as allowing remote authenticated users to affect confidentiality and integrity via vectors related ...
CVE-2014-5620
The CVE-2014-5620 entry concerns the Android app Office Jerk Free (com.fluik.OfficeJerkFree) version 1.7.13, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation in the TLS stack, enabling man-in-the-middle attackers to spoof servers and obtain sen...
CVE-2013-5620
The connected sources describe multiple vulnerabilities in Zoom Telephonics ADSL Modem/Router lines (X3, X4, X5, 5715, 5510B). Issues include Directory Traversal/Unauthenticated access to administrative panels, Unauthenticated direct execution of administrative tasks, Plain text storage of creden...
CVE-2013-5620
creationtimestamp| type| source ---|---|--- 2013-07-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38632...
ABB MicroSCADA wserver.exe Remote Code Execution
This module exploits a remote stack buffer overflow vulnerability in ABB MicroSCADA. The issue is due to the handling of unauthenticated EXECUTE operations on the wserver.exe component, which allows arbitrary commands. The component is disabled by default, but required when a project uses the SCI...
Fedora Update for dovecot FEDORA-2012-19752
Check for the Version of dovecot OpenVAS Vulnerability Test Fedora Update for dovecot FEDORA-2012-19752 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Fedora Update for dovecot FEDORA-2012-19752
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 16 : dovecot-2.0.21-4.fc16 (2012-19752)
do not crash during mail search CVE-2012-5620 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 10 : roundcubemail-0.2-5.beta.fc10 (2008-11456)
Patch to correct Denial Of Service issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...
Fedora Update for roundcubemail FEDORA-2008-11535
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for roundcubemail FEDORA-2008-11581
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora 8 : roundcubemail-0.2-5.beta.fc8 (2008-11581)
Patch to correct Denial Of Service issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...
Fedora 9 : roundcubemail-0.2-5.beta.fc9 (2008-11535)
Patch to correct Denial Of Service issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...
CVE-2008-5620
RoundCube Webmail roundcubemail before 0.2-beta allows remote attackers to cause a denial of service memory consumption via crafted size parameters that are used to create a large quota image...
