39 matches found
CVE-2018-7084
CVE-2018-7084 affects Aruba Instant devices via a command-injection flaw accessible to unauthenticated users with access to the Aruba Instant web interface. An attacker could run arbitrary OS commands, enabling file copy/read/write/delete, or device reboot. Workaround: block access to the Aruba I...
Adobe Reader < 2019.010.20091 / 2017.011.30120 / 2015.006.30475 Multiple Vulnerabilities (APSB19-07) (macOS)
The version of Adobe Reader installed on the remote macOS host is prior to 2019.010.20091, 2017.011.30120, 2015.006.30475. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-07 advisory. - Buffer Errors potentially leading to Arbitrary Code Execution CVE-2019-7020,...
Adobe Acrobat DC (Continuous Track) Security Updates (APSB19-07) - Mac OS X
Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB19-07) - Windows
Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Acrobat and Reader Use After Free (APSB19-07: CVE-2019-7084)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2017-7084
The CVE-2017-7084 entry affects macOS pre-10.13, specifically the Application Firewall. The connected Apple advisory notes an upgrade-time handling issue where a previously denied firewall setting could take effect after upgrading, effectively bypassing intended firewall configurations. This is a...
VMSA-2016-0014 : VMware ESXi, Workstation, Fusion, & Tools updates address multiple security issues
a. VMware Workstation heap-based buffer overflow vulnerabilities via Cortado ThinPrint VMware Workstation contains vulnerabilities that may allow a windows -based virtual machine VM to trigger heap-based buffer overflows in the windows-based hypervisor running VMware workstation that the VM resid...
CVE-2015-7084
creationtimestamp| type| source ---|---|--- 2016-01-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39366 2016-01-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39357...
CVE-2015-7084
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-7083...
Memory corruption
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-7084...
CVE-2015-7084
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2015-7083...
CVE-2015-7084
CVE-2015-7084 affects Apple iOS <9.2, OS X <10.11.2, tvOS <9.1, and watchOS
CVE-2014-7084
The CVE-2014-7084 entry concerns the Android app Hesheng 80 (package com.ireadercity.c29), version 3.0.2, which does not verify X.509 certificates from SSL servers. Root cause: TLS/SSL certificate verification is bypassed, enabling a man-in-the-middle to spoof servers and leak sensitive informati...
CVE-2008-7084
Directory traversal vulnerability in the web server 1.0 in Velocity Security Management System allows remote attackers to read arbitrary files via a .. dot dot in the URI...
CVE-2008-7084
CVE-2008-7084 describes a directory traversal vulnerability in the web server 1.0 of Velocity Security Management System. An attacker can read arbitrary files by using a “..” in the URI. The NVD entry lists a CVSSv2 base score of 5.0 (Medium) with network access, low attack complexity, no authent...
CVE-2008-7084
creationtimestamp| type| source ---|---|--- 2008-07-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6151...
CVE-2006-7084
CVE-2006-7084 is a duplicate of CVE-2006-7083. The real details and impact pertain to CVE-2006-7083: a directory traversal vulnerability in Rigter Portal System (RPS) versions 1.0, 2.0, and 3.0. Remote attackers can read arbitrary files by supplying .. sequences in the id parameter of index.php. ...
