33 matches found
Information disclosure
Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from...
CVE-2017-8498
Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read data not intended to be disclosed when Edge allows JavaScript XML DOM objects to detect installed browser extensions, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique fro...
CVE-2017-8498
CVE-2017-8498 affects Microsoft Edge on Windows 10 1607/1703 and Windows Server 2016. When Edge runs JavaScript that uses XML DOM objects to detect installed browser extensions, an attacker can read data not intended to be disclosed. This CVE is separate from CVE-2017-8504. No exploitation, remed...
Microsoft Windows Multiple Vulnerabilities (KB4022725)
This host is missing a critical security update according to Microsoft KB4022725 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-8498
CVE-2015-8498 entry is rejected and does not represent an active vulnerability entry.
Fedora Update for mingw-LibRaw FEDORA-2015-8498
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-8498
CVE-2014-8498 concerns ManageEngine Password Manager Pro (PMP) and PMP MSP before 7.1 build 7105. Affected component: BulkEditSearchResult.cc; vulnerability: SQL injection via the SEARCH_ALL parameter. Condition: authenticated user can trigger remote SQL commands, with evidence of blind SQL injec...
Password Manager Pro / Pro MSP - Blind SQL Injection Vulnerability
Exploit for php platform in category web applications Authenticated blind SQL injection in Password Manager Pro / Pro MSP Discovered by Pedro Ribeiro email protected, Agile Information Security ========================================================================== Disclosure: 08/11/2014 / Las...
Password Manager Pro SQL Injection
Hi, This is part 7 of the ManageOwnage series. For previous parts, see 1. Today we have a blind SQL injection in Password Manager Pro PMP that can be abused to escalate privileges for a low privileged user like a guest to the "super administrator". Using our new powers we can then dump the whole...
SuSE 10 Security Update : flash-player (ZYPP Patch Number 8498)
Adobe Flash Player has been updated to security release 11.2.202.275 APSB13-09, fixing severe security issues. CVE-2013-0646 / CVE-2013-0650 / CVE-2013-1371 / CVE-2013-1375 More information can be found on : http://www.adobe.com/support/security/bulletins/apsb13-09.html %NASLMINLEVEL 70300 C...
Fedora Core 11 FEDORA-2009-8498 (libxml2)
The remote host is missing an update to libxml2 announced via advisory FEDORA-2009-8498. OpenVAS Vulnerability Test $Id: fcore20098498.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8498 libxml2 Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 11 FEDORA-2009-8498 (libxml2)
The remote host is missing an update to libxml2 announced via advisory FEDORA-2009-8498. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
