296 matches found
CVE-2020-8003
CVE-2020-8003 applies to virglrenderer, specifically a double-free in vrend_renderer.c that can cause a denial of service when a texture allocation fails. The root cause is that vrend_renderer_resource_allocated_texture is not an appropriate place for a free. Public documentation in the connected...
CVE-2019-8003
CVE-2019-8003 affects Adobe Acrobat and Reader. Affected versions include Adobe Acrobat/Reader 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier. The root cause is a use-after-free vulnerability in the me...
Adobe Reader < 2015.006.30499 / 2017.011.30144 / 2019.012.20036 Multiple Vulnerabilities (APSB19-41)
The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30499, 2017.011.30144, or 2019.012.20036. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier,...
Adobe Acrobat 2017 Security Updates (APSB19-41) - Windows
Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
Adobe Acrobat and Reader Use After Free (APSB19-41: CVE-2019-8003)
A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2018-8003
CVE-2018-8003 affects Apache Ambari versions 1.4.0–2.6.1. The vulnerability is a directory traversal flaw that allows an unauthenticated, remote attacker to craft an HTTP request that reads files on the host filesystem accessible to the Ambari Server user. Network access to the Ambari Server is r...
EMC Data Protection Advisor < 6.4 Multiple Vulnerabilities
According to it's self-reported version number, the EMC Data Protection Advisor running on the remote host is prior to 6.4. It is, therefore, affected by multiple vulnerabilities : - Multiple blind SQL injection vulnerabilities exist due to improper sanitization of user-supplied input before usin...
CVE-2017-8003
EMC Data Protection Advisor prior to 6.4 contains a path traversal vulnerability. A remote authenticated high privileged user may potentially exploit this vulnerability to access unauthorized information from the underlying OS server by supplying specially crafted strings in input parameters of t...
CVE-2017-8003
CVE-2017-8003 relates to EMC Data Protection Advisor prior to 6.4, which contains a path traversal vulnerability. A remote authenticated high-privilege user can supply specially crafted strings in input parameters of the application to access unauthorized information from the underlying OS server...
EMC Data Protection Advisor SQL Injection / Path Traversal Vulnerabilities
Exploit for windows platform in category web applications EMC Data Protection Advisor Multiple Vulnerabilities CVE Identifier CVE-2017-8002, CVE-2017-8003 Severity: Medium Severity Rating: CVSS Base Score View details below for individual CVSS Score for each CVE Affected products: EMC Data...
Fedora 22 : mediawiki-1.25.3-1.fc22 (2015-24fe8b66c9)
https://www.mediawiki.org/wiki/Releasenotes/1.25MediaWiki1.25.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...
CVE-2015-8003
MediaWiki prior to 1.23.11, 1.24.x prior to 1.24.4, and 1.25.x prior to 1.25.3 are affected by CVE-2015-8003 due to lack of throttling for file uploads, allowing remote authenticated users to impact via multiple uploads. This is corroborated by NVD and OpenVAS/Nessus references showing the same C...
Mageia: Security Advisory (MGASA-2015-0421)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for mediawiki FEDORA-2015-24
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-8003
Cisco Integrated Management Controller in Cisco UCS 2.2(2c)A and earlier is affected by CVE-2014-8003 due to improper input validation in the map-nfs command. This allows an authenticated, local attacker to gain shell-level access to the device. The issue is tied to Bug CSCup05998. Cisco’s adviso...