CVE-2019-8225

Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-8225

CVE-2019-8225 is a use-after-free vulnerability in Adobe Acrobat and Reader across several legacy builds (e.g., 2019.012.20040 and earlier, 2017.x, 2015.x). The issue can allow arbitrary code execution on successful exploitation. Public documentation ties this CVE to Adobe APSB19-49, which detail...

Adobe Acrobat and Reader Use After Free (APSB19-49: CVE-2019-8225)

A use-after-free vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Adobe Acrobat 2017 Security Updates (APSB19-49) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Adobe Reader < 2015.006.30504 / 2017.011.30150 / 2019.021.20047 Multiple Vulnerabilities (APSB19-49) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30504, 2017.011.30150, or 2019.021.20047. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier,...

CVE-2018-8225

A remote code execution vulnerability exists in Windows Domain Name System DNS DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server...

CVE-2018-8225

A remote code execution vulnerability exists in Windows Domain Name System DNS DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server...

CVE-2018-8225

CVE-2018-8225 is a remote code execution vulnerability in Windows DNSAPI.dll that triggers when DNS responses are not handled correctly. Affected products span multiple Windows versions including Windows 7, Windows 8.1, Windows 10, and various Windows Server editions (2008, 2008 R2, 2012, 2012 R2...

CVE-2018-8225

creationtimestamp| type| source ---|---|--- 2018-06-13 10:02:32+00:00| seen| https://t.me/mikrotikninja/206...

KB4284860: Windows 10 June 2018 Security Update

The remote Windows host is missing security update 4284860. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Human Interface Device HID Parser Library driver improperly handles objects in memory. An attacker who successfully...

Security Updates for Windows Server 2008 (June 2018)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run...

Microsoft Windows DNSAPI CVE-2018-8225 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Failed exploit attempts may result in a denial of service condition. Technologies Affected Microsoft Windows 10 Versi...

KB4284846: Windows Server 2012 June 2018 Security Update

The remote Windows host is missing security update 4284846 or cumulative update 4284855. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Human Interface Device HID Parser Library driver improperly handles objects in memory. An...

Hackers Prepping IOTroop Botnet with Exploits

Hackers moved one step closer to launching full-scale DDoS attacks using millions of IoT devices herded into the botnet known as Reaper or IOTroop. Researchers at NewSky Security warn that hackers are swapping scripts on forums that can scan the internet for vulnerable IoT devices and dump defaul...

CVE-2014-8225

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2014-8225

...

CVE-2017-8225

CVE-2017-8225 is a pre-auth information disclosure in GoAhead-powered Wireless IP Camera (P2P) WIFICAM devices. The vulnerability lets an unauthenticated attacker bypass login by supplying empty loginuse/loginpas in the URI, enabling access to credentials stored in .ini/config files via the HTTP ...

CVE-2016-8225

Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges...

CVE-2016-8225

The CVE-2016-8225 entry concerns Lenovo Edge USB Keyboard Driver (also called Lenovo Slim USB Keyboard/Low Profile Keyboard) on Windows. The advisory LEN-11588 indicates a local privilege escalation vulnerability when the driver is prior to version 1.21. The root issue is exposed as a local explo...

Lenovo Edge USB Keyboard Driver Local Privilege Escalation - us

Lenovo Security Advisory: LEN-11588 Potential Impact: Escalation of privileges by a local user Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8225 Summary Description: A vulnerability was identified in the Lenovo Edge USB Keyboard driver for Windows 7, 8 and 10 where a...