117 matches found
ownCloud Server Arbitrary Command Execution Vulnerability
ownCloud is a free and open source personal cloud storage solution created by Frank Karlitschek, a German KDE developer. ownCloud Server is a server version . A security vulnerability exists in the external legacy SMB storage feature of ownCloud Server versions prior to 8.1.2, which can be...
Threat Outbreak Alert RuleID11430: Email Messages Distributing Malicious Software on September 5, 2014
Medium Alert ID: 35620 First Published: 2014 September 5 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11430 may contain the following files: Name |...
Tableau Server 8.0.7 8.1.2 - Blind SQL Injection
Tableau Server 8.0.7 8.1.2 - Blind SQL Injection Trustwave's SpiderLabs Security Advisory TWSL2014-003: Blind SQL Injection Vulnerability in Tableau Server Published: 02/07/14 Version: 1.1 Vendor: Tableau Software http://www.tableausoftware.com Product: Tableau Server Versions affected: 8.1.X...
ocPortal CMS 8.x Cross Site Request Forgery
OVERVIEW ocPoral CMS 8.x and lower versions are vulnerable to Cross-site Request Forgery CSRF / XSRF. 2. PRODUCT DESCRIPTION ocPortal is the website Content Management System a CMS for building and maintaining a dynamic website. ocPortal's powerful feature-set means there's always a way to...
ocPortal CMS 8.x Cross Site Request Forgery
Exploit for php platform in category web applications 1. OVERVIEW ocPoral CMS 8.x and lower versions are vulnerable to Cross-site Request Forgery CSRF / XSRF. 2. PRODUCT DESCRIPTION ocPortal is the website Content Management System a CMS for building and maintaining a dynamic website. ocPortal's...
CVE-2009-1201
Eval injection vulnerability in the cscowrapjs function in /+CSCOL+/cte.js in WebVPN on the Cisco Adaptive Security Appliances ASA device with software 8.04, 8.1.2, and 8.2.1 allows remote attackers to bypass a DOM wrapper and conduct cross-site scripting XSS attacks by setting CSCOWebVPN'process...
HP-UX Update for Bind 8.1.2 HPSBUX00303
Check for the Version of Bind 8.1.2 OpenVAS Vulnerability Test HP-UX Update for Bind 8.1.2 HPSBUX00303 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
HP-UX Update for Bind 8.1.2 HPSBUX00303
Check for the Version of Bind 8.1.2 OpenVAS Vulnerability Test HP-UX Update for Bind 8.1.2 HPSBUX00303 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
Reader: insecure RPATH flaw
Untrusted search path vulnerability in Adobe Reader and Acrobat 8.1.2 and earlier on Unix and Linux allows attackers to gain privileges via a Trojan Horse program in an unspecified directory that is associated with an insecure RPATH...
Adobe Acrobat和Reader 8.1.2多个安全漏洞
BUGTRAQ ID: 32100 CVE ID:CVE-2008-4812 CVE-2008-4813 CVE-2008-4814 CVE-2008-4815 Adobe Acrobat和Reader是PDF文件格式处理程序。 Adobe Acrobat和Reader存在多个安全问题,远程攻击者可以利用漏洞执行任意代码或提升特权等攻击。 -当处理包含在PDF文档中的恶意JavaScript时存在缺陷,当建立Collab对象并在之上执行特定序列操作时,存在内存破坏可导致任意代码执行。...
Security feature bypass
Unspecified vulnerability in the Download Manager in Adobe Reader 8.1.2 and earlier on Windows allows remote attackers to change Internet Security options on a client machine via unknown vectors...
CVE-2008-2992
Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf JavaScript function with a crafted format string argument, a related issue to CVE-2008-1104. Recent assessments: Assessed Attacker...
acroread: insecure handling of temporary files
acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files related to SSL certificate handling...
CVE-2008-2549
Adobe Acrobat/Reader vulnerability CVE-2008-2549 affects Adobe Reader 8.1.2 and earlier, and before 7.1.1, enabling remote attackers to cause an application crash (DoS) and potentially execute arbitrary code via a malformed PDF (e.g., 2008-HI2.pdf). Connected advisories confirm multiple vendors i...
PT-2008-2278
Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions prior to 8.1.2 Description The issue concerns multiple unspecified vulnerabilities in Adobe Reader and Acrobat. The impact and attack vectors of these vulnerabilities are unknown. Recommendations For versions...
HP-UX Security Patch : PHNE_33766
Bind 8.1.2 Patch %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26539; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/11";...
PostgreSQL database privilege escalation vulnerability
Overview PostgreSQL fails to properly recover from errors. This may allow an authenticated attacker to gain elevated privileges on a PostgreSQL database. Description PostgreSQL Database PostgreSQL is an open source database management system. The Problem There is a vulnerability in the way that...