41 matches found
CVE-2019-7113
Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier, 2017.011.30127 and earlier version, and 2015.006.30482 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2019-7113
CVE-2019-7113 affects Adobe Acrobat and Reader. The connected sources confirm a heap overflow in Adobe Acrobat/Reader versions 2019.010.20098 and earlier, 2017.011.30127 and earlier, and 2015.006.30482 and earlier, with successful exploitation potentially yielding arbitrary code execution. The vu...
Adobe Acrobat < 2015.006.30493 / 2017.011.30138 / 2019.010.20099 Multiple Vulnerabilities (APSB19-17)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30493, 2017.011.30138, or 2019.010.20099. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.010.20098 and earlier, 2019.010.20098 and earlier,...
Adobe Acrobat Reader DC (Continuous Track) Security Updates (APSB19-17) - Mac OS X
Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Adobe Acrobat 2017 Security Updates (APSB19-17) - Mac OS X
Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
CVE-2018-7113
CVE-2018-7113 affects HP’s Integrated Lights-Out 5 (iLO 5) prior to v1.37. The issue allows local attack to bypass firmware-update security restrictions, enabling unauthorized firmware updates. Affected component: iLO 5 firmware management; root cause: local bypass of update restrictions; impact:...
HPESBHF03894 rev.1 - HPE Integrated Lights-Out 5 (iLO 5) Firmware Updates, Local Bypass of Security Restrictions
Potential Security Impact: Local: Bypass Security Restrictions SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers - Prior to v1.37 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7113 |...
About the security content of iOS 11.1 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
CVE-2017-7113
An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "UIKit" component. It allows attackers to bypass intended read restrictions for secure text fields via vectors involving a focus-change event...
CVE-2016-7113
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions V1.03; Firmware variant IEC 104...
CVE-2016-7113
Siemens SIPROTEC 4/Compact EN100 Ethernet module vulnerabilities include CVE-2016-7113 (IMPROPER INPUT VALIDATION) where specially crafted packets to Port 80/TCP may cause the EN100 module to enter defect mode. Affected firmware variants are PROFINET IO (< V1.04.01), Modbus TCP (< V1.10.01/...
CVE-2015-7113
The CVE-2015-7113 issue affects Apple iOS before 9.2 and watchOS before 2.1, targeting the LaunchServices component via a malformed plist. The underlying fault is memory corruption that can allow attackers to execute arbitrary code in a privileged context or cause a denial of service. Impact is d...
CVE-2015-7113
The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a malformed plist...
CVE-2014-7113
The NASA Universe Wallpapers Xeus aka com.xeusNASA application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7113
The NASA Universe Wallpapers Xeus Android app (com.xeusNASA) v1.0 is affected by an SSL certificate validation flaw: it does not verify X.509 certificates from TLS/SSL servers, enabling MITM-style interception and exposure of sensitive data. Root cause: certificate validation bypass in the app; i...
Fritz!Box Webcm Unauthenticated Command Injection
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...
SuSE 11.3 Security Update : wireshark (SAT Patch Number 8977)
This update fixes a security problem in the BSSGP network protocol dissector that could crash wireshark. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novel...
[SECURITY] [DSA 2825-1] wireshark security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2825-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 20, 2013 http://www.debian.org/security/faq -...
CVE-2013-7113
epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies on a global variable, which allows remote attackers to cause a denial of service application crash via a crafted packet...
DEBIAN-CVE-2013-7113
epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies on a global variable, which allows remote attackers to cause a denial of service application crash via a crafted packet...