Magento Community Edition and Enterprise Edition PHP Remote File Inclusion Vulnerability

Magento is a professional open source PHP e-commerce system from Magento Inc. in the United States, which provides rights management, search engine and payment gateway, etc. Magento Community Edition CE is a community edition.Magento Enterprise Edition EE is an enterprise edition. A PHP remote fi...

Adobe Digital Editions < 4.0.1 (APSB14-25)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.0.1. It is, therefore, affected by a vulnerability as referenced in the APSB14-25 advisory. - Adobe Digital Editions DE 4 does not use encryption for transmission of data to adelogs.adobe.com, which allows...

Adobe Digital Editions < 4.0.1 Information Disclosure (APSB14-25) (Mac OS X)

The version of Adobe Digital Editions installed on the remote Mac OS X host is prior to 4.0.1. It is, therefore, affected by an information disclosure vulnerability due to the transmission of sensitive data in cleartext. C Tenable Network Security, Inc. include"compat.inc"; if description...

APSB14-25 Security update available for Adobe Digital Editions

Adobe has released a security update for Adobe Digital Editions version 4.0.98786 and earlier for Windows and Macintosh. This update adds support for secure transmission of rights management and licensing validation information...

Adobe Digital Edition Information Disclosure Vulnerability - Windows

Adobe Digital Edition is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-8068

Adobe Digital Editions DE 4 does not use encryption for transmission of data to adelogs.adobe.com, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by book-navigation information...

Design/Logic Flaw

Adobe Digital Editions DE 4 does not use encryption for transmission of data to adelogs.adobe.com, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by book-navigation information...

CVE-2014-8068

Adobe Digital Editions DE 4 does not use encryption for transmission of data to adelogs.adobe.com, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by book-navigation information...

CVE-2014-8068

CVE-2014-8068 affects Adobe Digital Editions 4.x. The issue is information disclosure: DE 4 does not encrypt data transmitted to adelogs.adobe.com, enabling network sniffing of sensitive information (e.g., book-navigation data). Affected platforms include Windows and macOS; older than 4.0.1 build...

OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162)

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key agreement."...

netclassifieds (sql/xss/full path) Multiple Vulnerabilities

No description provided by source. Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...

AlmondSoft Classifieds Pro gmap.php addr Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/35816/info AlmondSoft Almond Classifieds is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412...

OpenJDK: ServiceLoader Exception handling security bypass (Libraries, 8031394)

Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...

OpenJDK: JPEG decoder input stream handling (2D, 8029854)

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...

CVE-2014-2034

Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."...

Adobe Digital Editions 2.0.0 'rmsdk_wrapper.dll' Memory Corruption (APSB13-20)

The version of Adobe Digital Editions installed on the remote host is 2.0.0. It is, therefore, affected by a memory corruption vulnerability related to the file 'rmsdkwrapper.dll' and handling embedded font streams, such as those in PDF files, that could allow denial of service attacks and possib...

Adobe Digital Editions 2.0.0 Memory Corruption (Mac OS X)

The version of Adobe Digital Editions installed on the remote Mac OS X host is 2.0.0. It is, therefore, affected by a memory corruption vulnerability related to handling embedded font streams, such as those in PDF files, that could allow denial of service attacks and possibly arbitrary code...

Adobe Digital Editions 2.0.1 Memory Corruption (Mac OS X)

The version of Adobe Digital Editions installed on the remote Mac OS X host is 2.0.1. It is, therefore, affected by an unspecified memory corruption vulnerability that could allow denial of service attacks and possibly arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"...

Adobe Digital Editions < 3.0 (APSB14-03)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 3.0. It is, therefore, affected by a vulnerability as referenced in the APSB14-03 advisory. - Adobe Digital Editions 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corrupti...