Out-of-bounds

VMware ESXi 6.7 before ESXi670-201806401-BG, Workstation 14.x before 14.1.2, and Fusion 10.x before 10.1.2 contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user...

Out-of-bounds

VMware ESXi 6.7 before ESXi670-201806401-BG, Workstation 14.x before 14.1.2, and Fusion 10.x before 10.1.2 contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user...

CVE-2018-6965

CVE-2018-6965/6966/6967 describe an out-of-bounds read in the shader translator affecting VMware ESXi 6.7 (before ESXi670-201806401-BG), Workstation 14.x (before 14.1.2), and Fusion 10.x (before 10.1.2). The issue can lead to information disclosure and, for users with normal privileges, VM crashe...

CVE-2018-6967

VMware ESXi 6.7 before ESXi670-201806401-BG, Workstation 14.x before 14.1.2, and Fusion 10.x before 10.1.2 contain an out-of-bounds read vulnerability in the shader translator. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user...

CVE-2018-6967

CVE-2018-6967 affects VMware ESXi 6.7 (before the patch ESXi670-201806401-BG), Workstation 14.x (before 14.1.2), and Fusion 10.x (before 10.1.2). The issue is an out-of-bounds read in the shader translator, which can lead to information disclosure or cause a VM crash when exploited by a user with...

VMSA-2018-0016 : VMware ESXi, Workstation, and Fusion updates address multiple out-of-bounds read vulnerabilities

ESXi, Workstation, and Fusion multiple out-of-bounds read vulnerabilities VMware ESXi, Workstation and Fusion contain multiple out-of-bounds read vulnerabilities in the shader translator. Successful exploitation of these issues may lead to information disclosure or may allow attackers with normal...

CVE-2018-6967

creationtimestamp| type| source ---|---|--- 2018-07-02 13:01:24+00:00| seen| https://t.me/canyoupwnme/4060...

VMSA-2018-0016:VMware ESXi, Workstation, and Fusion updates address multiple out-of-bounds read vulnerabilities

VMSA-2018-0016 VMware ESXi, Workstation, and Fusion updates address multiple out-of-bounds read vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0016 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware ESXi, Workstation, a...

CVE-2017-6967

CVE-2017-6967 affects xrdp (v0.9.1) where PAM session modules are not properly initialized due to calling auth_start_session in the wrong place, potentially enabling privilege elevation or misconfiguration through pam_limits.so bypass. Public sources (Ubuntu USN-4815-1, SUSE/SLES advisories) indi...

Adobe Acrobat and Reader Use After Free (APSB16-33: CVE-2016-6965; CVE-2016-6967; CVE-2016-6968; CVE-2016-6969)

A use after free vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an error in the way Adobe Acrobat and Reader handles objects in memory. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2016-6944

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...

CVE-2016-6967

Technical details for CVE-2016-6967 are not publicly available in the provided documents. Monitor for updates.

CVE-2015-6967

creationtimestamp| type| source ---|---|--- 2015-10-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38489 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/nibbleblogfileupload.rb 2023-11-09 12:22:12+00:00|...

CVE-2015-6967

Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/myimage/image.php...

CVE-2015-6967

Nibbleblog's My Image plugin vulnerability CVE-2015-6967 affects versions prior to 4.0.5. An unrestricted file upload lets remote attackers upload a file with an executable extension and access it directly at content/private/plugins/my_image/image.php, enabling arbitrary code execution on the ser...

Cisco WebEx Sales Center开放重定向漏洞

Bugtraq ID:64284 CVE ID:CVE-2013-6967 Cisco WebEx是一款网络会议解决方案。 Cisco WebEx Sales Center存在开放重定向漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可重定向用户到攻击者指定WEB站点，进行网络钓鱼等攻击。 0 Cisco WebEx Sales Center 厂商补丁： Cisco ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2013-6967

Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36020...

CVE-2013-6967

CVE-2013-6967 is an open-redirect flaw in Cisco WebEx Sales Center’s mobile browser subsystem that could let an unauthenticated, remote attacker lure users to attacker-controlled URLs, enabling phishing. Affected product: Cisco WebEx Sales Center (mobile browser component). Root cause: open redir...