Adobe Acrobat < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30523, 2017.011.30171, or 2020.009.20063. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier,...

CVE-2019-9595

AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter...

CVE-2019-9595

CVE-2019-9595 affects AppCMS 2.0.101 and enables cross-site scripting via the upload/callback.php parameters. The vulnerability is a client-visible XSS in a parameter passed to the upload/callback.php endpoint. NVD reports CVSS v2 base score 4.3 (MEDIUM) with network access, and CVSS v3 base scor...

CVE-2016-9595

Summary: CVE-2016-9595 affects katello-debug before 3.4.0. Affected component uses insecure temporary files for scripts and logs, enabling a local attacker to perform a symbolic-link attack to overwrite arbitrary files. This is supported by multiple sources (NVD entry, CNVD entry, Veracode note, ...

Important: Red Hat Security Advisory: Satellite 6.3 security, bug fix, and enhancement update

An update is now available for Red Hat Satellite. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

CVE-2017-9595

The "First State Bank of Bigfork Mobile Banking" by First State Bank of Bigfork app 4.0.3 -- aka first-state-bank-of-bigfork-mobile-banking/id1133969876 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2017-9595

The "First State Bank of Bigfork Mobile Banking" by First State Bank of Bigfork app 4.0.3 -- aka first-state-bank-of-bigfork-mobile-banking/id1133969876 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2017-9595

The CVE-2017-9595 entry concerns the iOS app “First State Bank of Bigfork Mobile Banking” (version 4.0.3, iOS) and reports that the app does not verify X.509 SSL server certificates. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...

CVE-2014-9595

CVE-2014-9595 affects the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit . It is a buffer overflow vulnerability (in Dispatcher) that can allow a remote, authenticated attacker to cause a denial of service or possibly execute arbitrary code . The advisory confirms that exploit...

CVE-2014-9595

Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated users to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the Spool System, aka SAP Note 2061271...

SAP Kernel - RCE and DoS vulnerability

Application: SAP NetWeaver Dispatcher Versions Affected: SAP Kernel 7.00 32BIT, 7.40 64BIT Vendor URL: http://www.sap.com Vulnerability: Buffer Overflow – RCE, Denial of Service Exploits: YES Reported: 25.08.2014 Vendor response: 25.08.2014 Date of Public Advisory: 15.12.2014 Reference: SAP...