34 matches found
Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...
Design/Logic Flaw
The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API...
Design/Logic Flaw
The CBBBRInvite method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API execution...
Design/Logic Flaw
The CBSharedReviewSecurityDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScrip...
Design/Logic Flaw
The CBSharedReviewCloseDialog method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript A...
CVE-2015-6715
Technical details for CVE-2015-6715 are not publicly available in the provided documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates.
CVE-2015-6715
The Function apply implementation in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to bypass JavaScript API...
CVE-2014-6715
The CVE-2014-6715 entry concerns the SlotMachine Android app (com.popoinnovation.SlotMachine) version 1.03, where X.509 certificate verification for SSL/TLS connections is not performed. Root cause: lack of certificate validation enables MITM attackers to spoof servers and exfiltrate sensitive in...
CoDeSys Gateway Service Unprotected (SCADA)
Binary data 6715.prm...
SuSE 10 Security Update : pyxml (ZYPP Patch Number 6715)
Specially crafted XML documents could make pyxml run into an enless loop, therefore locking up applications using pyxml. CVE-2009-3720 / CVE-2009-3560 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
CVE-2008-6715
Pre ADS Portal 2.0 and earlier are affected by cross-site scripting (XSS) vulnerabilities. The CVE describes XSS via the msg parameter to two admin pages: homeadmin/adminhome.php and homeadmin/signinform.php. The vulnerable component is the web front-end; root cause is unsanitized input in the ms...
CVE-2007-6715
CVE-2007-6715 : Mozilla Firefox is vulnerable to a denial of service (crash) via a crafted image, as demonstrated by the zzuf lol-firefox.gif test case. Public sources (NVD/SUSE/Ubuntu) confirm the vulnerability in Firefox and note the fix has been applied in the product (status: Fixed). The avai...
CVE-2006-6715
PowerClan 1.14a and earlier is affected by a PHP remote file inclusion in footer.inc.php. The root cause is a user-controllable URL passed via the settings[footer] parameter when register_globals is enabled, allowing remote attackers to execute arbitrary PHP code. This vulnerability can enable co...
