40 matches found
CVE-2019-8724
CVE-2019-8724 concerns ld64 in the Xcode toolchains. The vulnerability arises from input validation failures in ld64, allowing arbitrary code execution with user privileges. Affected product: Apple Xcode 11.0 toolchain (macOS Mojave 10.14.4 and later) where the issue is fixed by updating to ld64-...
Moxa AWK-3131A serviceAgent Information Disclosure Vulnerability(CVE-2016-8724)
Summary An exploitable information disclosure vulnerability exists in the serviceAgent functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted TCP query will allow an attacker to retrieve potentially sensitive information. Tested Versions Moxa AWK-3131A...
CVE-2017-8724
Microsoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to trick a user by redirecting the user to a specially crafted website, due to the way that Microsoft Edge parses HTTP content, aka "Microsoft Edge Spoofing Vulnerability". This CVE ID is unique from CVE-2017-8735...
Spoofing
Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to trick a user by redirecting the user to a specially crafted website, due to the way that Microsoft Edge parses HTTP content, aka "Microsoft Edge Spoofing Vulnerability". This CVE ID is...
CVE-2017-8724
CVE-2017-8724 describes a spoofing vulnerability in Microsoft Edge on Windows 10 Version 1703, caused by the browser’s handling/parsing of HTTP content. An attacker could trick a user by redirecting to a specially crafted website. The CNVD entry confirms Edge spoofing in Edge on Windows 10 1703; ...
Microsoft Edge CVE-2017-8724 Spoofing Vulnerability
Description Microsoft Edge is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft Edge...
CVE-2016-8724
An exploitable information disclosure vulnerability exists in the serviceAgent functionality of Moxa AWK-3131A Wireless Access Point running firmware 1.1. A specially crafted TCP query will allow an attacker to retrieve potentially sensitive information...
CVE-2016-8724
Affected product: Moxa AWK-3131A Wireless Access Point (firmware 1.1). Vulnerability: serviceAgent information disclosure via a crafted TCP query, enabling an attacker to retrieve sensitive device information. Root cause / details: unauthenticated, cleartext communication exposed by the serviceAg...
Code injection
Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability...
CVE-2017-2968
Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability...
CVE-2017-2968
CVE-2017-2968 affects Adobe Campaign versions 16.4 Build 8724 and earlier, described as a code injection vulnerability. The connected advisories indicate that an authenticated user with access to the client console could upload and execute a malicious file, potentially granting read/write access ...
Adobe Campaign Cross-Site Scripting Vulnerability
Adobe Campaign formerly known as Neolane is a set of marketing management solutions from the American company Audobee Adobe. The program provides extended real-time interactive management and enhance distributed marketing and other features. A cross-site scripting vulnerability exists in Adobe...
Wireshark Multiple DoS Vulnerabilities (wnpa-sec-2015-41, wnpa-sec-2015-45) - Windows
Wireshark is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Wireshark Multiple DoS Vulnerabilities (wnpa-sec-2015-41, wnpa-sec-2015-45) - Mac OS X
Wireshark is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2015-8724
CVE-2015-8724 affects Wireshark’s 802.11 dissector: the AirPDcapDecryptWPABroadcastKey function in epan/crypt/airpdcap.c does not verify the WPA broadcast key length. This can be exploited by a crafted packet to cause an out-of-bounds read and application crash (DoS). Affected releases include Wi...
CVE-2015-8724
creationtimestamp| type| source ---|---|--- 2015-12-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39077...
WordPress W3 Total Cache < 0.9.4.1 XSS Vulnerability - Active Check
WordPress W3 Total Cache is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2014-8724
CVE-2014-8724 affects the WordPress plugin W3 Total Cache up to version before 0.9.4.1 . The root cause is improper sanitization of user-supplied input in the HTML comments for the Cache key when the page cache debug info is enabled, allowing a reflected XSS scenario via PATH_INFO to the default ...
SuSE 11.2 / 11.3 Security Update : xorg-x11 (SAT Patch Numbers 8723 / 8724)
This update fixes a stack-based buffer overflow in xorg-x11 in the function bdfReadCharacters. CVE-2013-6462 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...