39 matches found
CVE-2019-8026
Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code...
Adobe Reader < 2015.006.30499 / 2017.011.30144 / 2019.012.20036 Multiple Vulnerabilities (APSB19-41)
The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30499, 2017.011.30144, or 2019.012.20036. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier,...
Adobe Acrobat 2017 Security Updates (APSB19-41) - Windows
Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
Apache Solr Multiple XXE Vulnerabilities (SOLR-12450) - Linux
Apache Solr is prone to multiple XML external entity XXE vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2018-8026
This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion XXE in Solr config files currency.xml, enumsConfig.xml referred from schema.xml, TIKA parsecontext config file. In addition, Xinclude functionality provided in these config files is als...
CVE-2018-8026
CVE-2018-8026 affects Apache Solr releases 6.0.0–6.6.4 and 7.0.0–7.3.1, due to an XML External Entity (XXE) flaw in Solr config files (currency.xml, enumsConfig.xml referenced from schema.xml, and TIKA parsecontext) and related XInclude handling. An attacker could craft XML and upload manipulated...
CVE-2017-8026
CVE-2017-8026 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
McAfee Security Scan Plus < 3.11.474.2 Multiple Vulnerabilities (TS102593 / TS102614)
The version of McAfee Security Scan Plus installed on the remote Windows host is prior to 3.11.474.2. It is, therefore, affected by multiple vulnerabilities : - A privilege escalation vulnerability exists in McUICnt.exe due to certain DLL files being loaded from the same directory as signed...
CVE-2015-8026
Heap-based buffer overflow in the verifyvbrchecksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service infinite loop or possibly execute arbitrary code via a crafted filesystem...
CVE-2015-8026
Heap-based buffer overflow in the verifyvbrchecksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service infinite loop or possibly execute arbitrary code via a crafted filesystem...
CVE-2015-8026
Heap-based buffer overflow in the verifyvbrchecksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service infinite loop or possibly execute arbitrary code via a crafted filesystem...
CVE-2015-8026
CVE-2015-8026 describes a heap-based buffer overflow in the verify_vbr_checksum function of exfatfsck in exfat-utils before 1.2.1. The vulnerability allows an attacker to cause a denial of service (infinite loop) and potentially execute arbitrary code via a crafted filesystem. Affected component ...
CVE-2015-8026
Heap-based buffer overflow in the verifyvbrchecksum function in exfatfsck in exfat-utils before 1.2.1 allows remote attackers to cause a denial of service infinite loop or possibly execute arbitrary code via a crafted filesystem...
CVE-2016-8026
McAfee Security Scan Plus (SSP)
CVE-2014-8026
Cisco Jabber Guest Server contains a reflected XSS vulnerability (CVE-2014-8026) due to insufficient input validation of HTTP GET/POST parameters, enabling an unauthenticated remote attacker to inject scripts via crafted links. Exploitation targets the web interface user context. Affected product...
Dropbear SSH Memory Corruption Denial of Service and User Enumeration Weakness
Binary data 8026.prm...
SuSE 11.2 / 11.3 Security Update : ruby (SAT Patch Numbers 8026 / 8027)
Ruby failed to check hostnames correctly when setting up a SSL client connection. CVE-2013-4073 was assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself i...
