Adobe Reader < 2015.006.30499 / 2017.011.30144 / 2019.012.20036 Multiple Vulnerabilities (APSB19-41)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30499, 2017.011.30144, or 2019.012.20036. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier,...

Adobe Acrobat 2017 Security Updates (APSB19-41) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

com.consol.citrus:citrus-camel (>=2.7.4, <=2.7.9), com.github.igor-suhorukov:camel-aws (>=2.20.1.2, <=2.20.1.5) +743 more potentially affected by CVE-2018-8027 via org.apache.camel:camel-core (>=2.20.0, <=2.20.3)

org.apache.camel:camel-core MAVEN version =2.20.0, =2.7.4, =2.20.1.2, =2.20.0, =0.1.0, =1.0.0, =2.20.0, =1.2.23-release, =1.31.1, =1.5.x, =1.12.0, =2.0.0, =1.12.0, =1.3.0, =1.3.0-20180301, =1.3.0-20180304 and more Source cves: CVE-2018-8027 Source advisory: OSV:GHSA-8VFM-4388-6RPC...

com.github.hqstevenson.junit:sftp-junit (0.2.0), com.github.oscerd:camel-cassandra (2.21.0) +670 more potentially affected by CVE-2018-8027 via org.apache.camel:camel-core (2.21.0)

org.apache.camel:camel-core MAVEN version 2.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.github.hqstevenson.junit:sftp-junit 0.2.0 - com.github.oscerd:camel-cassandra 2.21.0 -...

com.consol.citrus:citrus-camel (>=2.7.4, <=2.7.9), com.github.igor-suhorukov:camel-aws (>=2.20.1.2, <=2.20.1.5) +743 more potentially affected by CVE-2018-8027 via org.apache.camel:camel-core (>=2.20.0, <=2.20.3)

org.apache.camel:camel-core MAVEN version =2.20.0, =2.7.4, =2.20.1.2, =2.20.0, =0.1.0, =1.0.0, =2.20.0, =1.2.23-release, =1.31.1, =1.5.x, =1.12.0, =2.0.0, =1.12.0, =1.3.0, =1.3.0-20180301, =1.3.0-20180304 and more Source cves: CVE-2018-8027 Source advisory: MEND:CVE-2018-8027...

com.github.hqstevenson.junit:sftp-junit (0.2.0), com.github.oscerd:camel-cassandra (2.21.0) +670 more potentially affected by CVE-2018-8027 via org.apache.camel:camel-core (2.21.0)

org.apache.camel:camel-core MAVEN version 2.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.github.hqstevenson.junit:sftp-junit 0.2.0 - com.github.oscerd:camel-cassandra 2.21.0 -...

CVE-2018-8027

Apache Camel Core is vulnerable to XML External Entity (XXE) processing in the XSD validation processor. Affected versions are 2.20.0–2.20.3 and 2.21.0. Root cause: improper handling of XML external entities in the XSD validation path, enabling a remote attacker to read arbitrary files when a vic...

CVE-2017-8027

...

CVE-2017-8027

CVE-2017-8027 is rejected/not used and does not represent an active vulnerability entry.

McAfee ePolicy Orchestrator SQL Injection Vulnerability

McAfee ePolicy Orchestrator is prone to a blind SQL injection vulnerability SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-8027

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator ePO 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a...

CVE-2016-8027

Summary: CVE-2016-8027 is a SQL injection in McAfee ePolicy Orchestrator (ePO) where the Agent GUID is used to build a SQL query without proper sanitization. The vulnerability exists in the DataChannel/Agent communication path (via SPIPE and HTTP POST) used by agents to report data. The exploit c...

CVE-2016-8027

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator ePO 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a...

About the security content of Xcode 8.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

Apple Xcode < 8.1 Node.js Multiple RCE (macOS)

The version of Apple Xcode installed on the remote macOS or Mac OS X host is prior to 8.1. It is, therefore, affected by multiple remote code execution vulnerabilities in the Node.js component of the Xcode Server. An unauthenticated, remote attacker can exploit these vulnerabilities to cause a...

About the security content of Xcode 8.1

About the security content of Xcode 8.1 This document describes the security content of Xcode 8.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

betanews.com XSS vulnerability

Vulnerable URL: http://betanews.com/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8027 VIP...

openSUSE Security Update : nodejs (openSUSE-2016-46)

This update contains nodejs 4.2.4 and fixes the following issues : - CVE-2015-6764: unspecified out-of-bounds access vulnerability boo956902 - CVE-2015-8027: unspecified denial of service vulnerability boo956901 The following non-security bugs were fixed : - boo948045: Nodejs 4.0 rpm does not...

CVE-2015-8027

Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service uncaughtException and service outage via a pipelined HTTP request...

CVE-2015-8027

Technical details for CVE-2015-8027 are not publicly available in the provided connected documents. Monitor for updates from official advisories; current sources reiterate the description without specifics on affected versions, impact, or fixes.