83 matches found
CVE-2019-8597
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution...
CVE-2019-8610
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution...
CVE-2019-8607
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of proces...
CVE-2019-6237
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution...
CVE-2019-8607
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of proces...
CVE-2019-8615
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution...
Critical Vulnerability Found in Cisco Video Surveillance Manager
A critical vulnerability in the Cisco Video Surveillance Manager software has been uncovered, which could allow an unauthenticated, remote attacker to log in and execute arbitrary commands as the root user. The issue is a simple one: Affected versions contain static user credentials for the root...
Citrix Provisioning Services Remote Code Execution and Information Disclosure Vulnerabilities
Citrix Provisioning Services is prone to multiple remote code execution RCE and information disclosure vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2016-9680
Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive information from kernel memory via unspecified vectors...
Information disclosure
Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive kernel address information via unspecified vectors...
CVE-2016-9680
CVE-2016-9680 affects Citrix Provisioning Services prior to 7.12, exposing kernel memory information via unspecified vectors. Documented impact is information disclosure. No explicit exploit details, vectors, or fix/version beyond “before 7.12” are provided in the supplied sources; remediation/ve...
CVE-2016-9679
Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer...
CVE-2007-6752
Cross-site request forgery CSRF vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by considering the "security benefit...
CVE-2007-6752
Cross-site request forgery CSRF vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by considering the "security benefit...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by considering the "security benefit...
CVE-2007-6752
Removed by vendor...
Remote file inclusion
PHP remote file inclusion vulnerability in portfolio/commentaires/dernierscommentaires.php in Cyberfolio 7.12, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rep parameter...
CVE-2008-2228
PHP remote file inclusion vulnerability in portfolio/commentaires/dernierscommentaires.php in Cyberfolio 7.12, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rep parameter...
CVE-2008-2228
CVE-2008-2228 is a PHP remote file inclusion vulnerability affecting Cyberfolio 7.12, exploitable when register_globals is enabled. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the rep parameter within portfolio/commentaires/derniers_commentaires.php. Public sou...
Cyberfolio 7.12 (rep) Remote File Inclusion Vulnerability
No description provided by source. -========================================== ViVa Islam + YeMeN ====================================- Name : cyberfolio 7.2 Remote File Include Vulnerabiliy Download From : http://cyberfolio.org/sources/version7.10/cyberfolio712.zip Found By : RoMaNcYxHaCkEr...