CVE-2015-8033

The CVE-2015-8033 entry concerns Textpattern 4.5.7, where the password-reset feature does not securely tether a password hash to a user account. The NVD data lists CVSS v3.1 base metrics: 5.3 (Medium) with Network attack vector, Low attack complexity, no privileges required, no user interaction, ...

CVE-2020-8033

Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field...

CVE-2020-8033

CVE-2020-8033 affects CommScope/Ruckus ZoneFlex R500 devices running firmware 3.4.2.0.384. The vulnerability is a Cross-Site Scripting (XSS) issue in the web UI, exploitable via the index.asp Device Name field. The connected documents do not provide detailed exploit steps, impact scope, or remedi...

CVE-2019-8033

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code...

CVE-2019-8033

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code...

CVE-2019-8033

CVE-2019-8033: Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2017.011.30142/30143 and earlier, and 2015.006.30497/30498 and earlier suffer a use-after-free vulnerability that could lead to arbitrary code execution on successful exploitation. The provided connected documents confir...

Adobe Reader < 2015.006.30499 / 2017.011.30144 / 2019.012.20036 Multiple Vulnerabilities (APSB19-41)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30499, 2017.011.30144, or 2019.012.20036. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier,...

Adobe Acrobat 2017 Security Updates (APSB19-41) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Adobe Acrobat and Reader Use After Free (APSB19-41: CVE-2019-8033)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2018-8033

In Apache OFBiz 16.11.01 to 16.11.04, the OFBiz HTTP engine org.apache.ofbiz.service.engine.HttpEngine.java handles requests for HTTP services via the /webtools/control/httpService endpoint. Both POST and GET requests to the httpService endpoint may contain three parameters: serviceName,...

CVE-2018-8033

CVE-2018-8033 affects Apache OFBiz 16.11.01–16.11.04. The vulnerability lies in the OFBiz HTTP engine at /webtools/control/httpService, where POST/GET requests may include serviceName, serviceMode, and serviceContext. Exploitation is achieved via DOCTYPEs referencing external entities, triggering...

Design/Logic Flaw

In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE-2017-8033 introduces an API regression that allows a space developer to execute arbitrary code on the Cloud Controller VM by pushing a specially...

CVE-2017-8033

The CVE-2017-8033 issue affects Cloud Foundry’s Cloud Controller API in capi-release v1.33.0+ and cf-release v268+ (pre-v1.35.0 and pre-v268 respectively), where a filesystem-traversal flaw lets a space developer write arbitrary files on the Cloud Controller VM by pushing a crafted app. The origi...

CVE-2017-8033: Cloud Controller API filesystem traversal vulnerability | Cloud Foundry

Severity High Vendor Cloud Foundry Foundation Versions Affected CAPI-release versions prior to v1.35.0 cf-release versions prior to v268 Description A filesystem traversal vulnerability exists in the Cloud Controller that allows a space developer to escalate privileges by pushing a...

CVE-2016-8033

...

CVE-2016-8033

CVE-2016-8033 is rejected and not an active vulnerability entry per the Initial Description.

CVE-2014-8033

The CVE-2014-8033 issue affects Cisco WebEx Meetings Server, specifically the play/modules component. It enables an unauthenticated, remote attacker to gain administrator privileges by sending crafted API requests to a vulnerable device, due to an exposed API. Impact described as administrator ac...

SuSE 11.2 / 11.3 Security Update : nagios-nrpe, nagios-plugins-nrpe (SAT Patch Numbers 8032 / 8033)

Nagios NRPE was updated to add more blacklisting to avoid shell injection via nagios request packets. CVE-2013-1362 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...