1799 matches found
Design/Logic Flaw
Adobe Digital Editions DE 4 does not use encryption for transmission of data to adelogs.adobe.com, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by book-navigation information...
CVE-2014-8068
CVE-2014-8068 affects Adobe Digital Editions 4.x. The issue is information disclosure: DE 4 does not encrypt data transmitted to adelogs.adobe.com, enabling network sniffing of sensitive information (e.g., book-navigation data). Affected platforms include Windows and macOS; older than 4.0.1 build...
CVE-2014-8068
Adobe Digital Editions DE 4 does not use encryption for transmission of data to adelogs.adobe.com, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by book-navigation information...
PT-2014-8392
Name of the Vulnerable Software and Affected Versions Adobe Digital Editions version 4 Description The issue concerns the transmission of data to adelogs.adobe.com without encryption, allowing remote attackers to obtain sensitive information by sniffing the network. This can be demonstrated by...
CVE-2014-8068: Exposure of Sensitive Information to an Unauthorized Actor
Adobe Digital Editions DE 4 does not use encryption for transmission of data to adelogs.adobe.com, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by book-navigation information...
OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162)
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key agreement."...
netclassifieds (sql/xss/full path) Multiple Vulnerabilities
No description provided by source. Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...
AlmondSoft Classifieds Pro gmap.php addr Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/35816/info AlmondSoft Almond Classifieds is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...
OpenJDK: AWT incorrect FlavorMap seperation (AWT, 8026797)
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-2412...
OpenJDK: ServiceLoader Exception handling security bypass (Libraries, 8031394)
Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...
OpenJDK: JPEG decoder input stream handling (2D, 8029854)
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...
CVE-2014-2034
Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."...
Adobe Digital Editions Installed (Mac OS X)
Binary data macosxadobedigitaleditionsinstalled.nbin...
Adobe Digital Editions 2.0.0 Memory Corruption (Mac OS X)
The version of Adobe Digital Editions installed on the remote Mac OS X host is 2.0.0. It is, therefore, affected by a memory corruption vulnerability related to handling embedded font streams, such as those in PDF files, that could allow denial of service attacks and possibly arbitrary code...
Adobe Digital Editions Installed
Binary data adobedigitaleditionsinstalled.nbin...
Adobe Digital Editions 2.0.0 'rmsdk_wrapper.dll' Memory Corruption (APSB13-20)
The version of Adobe Digital Editions installed on the remote host is 2.0.0. It is, therefore, affected by a memory corruption vulnerability related to the file 'rmsdkwrapper.dll' and handling embedded font streams, such as those in PDF files, that could allow denial of service attacks and possib...
Adobe Digital Editions < 3.0 (APSB14-03)
The version of Adobe Digital Editions installed on the remote Windows host is prior to 3.0. It is, therefore, affected by a vulnerability as referenced in the APSB14-03 advisory. - Adobe Digital Editions 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corrupti...
Adobe Digital Editions 2.0.1 Memory Corruption (Mac OS X)
The version of Adobe Digital Editions installed on the remote Mac OS X host is 2.0.1. It is, therefore, affected by an unspecified memory corruption vulnerability that could allow denial of service attacks and possibly arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"...
