8306 matches found
CVE-2015-3315
Automatic Bug Reporting Tool ABRT allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on 1 /var/tmp/abrt//maps, 2 /tmp/jvm-/hserror.log, 3 /proc//exe, 4 /etc/os-release in a chroot, or 5 an unspecified root directory relate...
CVE-2015-1870: Exposure of Sensitive Information to an Unauthorized Actor
The event scripts in Automatic Bug Reporting Tool ABRT uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors...
CVE-2015-3315: Improper Link Resolution Before File Access
Automatic Bug Reporting Tool ABRT allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on 1 /var/tmp/abrt//maps, 2 /tmp/jvm-/hserror.log, 3 /proc//exe, 4 /etc/os-release in a chroot, or 5 an unspecified root directory relate...
CVE-2015-3142: Exposure of Sensitive Information to an Unauthorized Actor
The kernel-invoked coredump processor in Automatic Bug Reporting Tool ABRT does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application...
Adobe Captivate Remote Code Execution Vulnerability
Adobe Captivate is a rapid response authoring tool for creating eLearning content such as software demos, software simulations, branching scenarios and randomized quizzes in .swf and HTML5 formats. A remote code execution vulnerability exists in the quiz reporting feature of Adobe Captivate, whic...
CVE-2017-3087
Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...
CVE-2017-3098
Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...
Remote code execution
Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...
Information disclosure
Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...
CVE-2017-3087
Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...
CVE-2017-3098
Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...
CVE-2017-3087
Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...
CVE-2017-3098
Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...
CVE-2017-3087
Adobe Captivate
CVE-2017-3098
Adobe Captivate
PT-2017-15638
Name of the Vulnerable Software and Affected Versions Adobe Captivate versions 9 and earlier Description The issue is related to an information disclosure problem caused by the misuse of the quiz reporting feature in Adobe Captivate. Recommendations For Adobe Captivate versions 9 and earlier,...
CVE-2017-3098: Improper Input Validation
Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read and write arbitrary files to the server...
CVE-2017-3087: Exposure of Sensitive Information to an Unauthorized Actor
Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...
PT-2017-15649
Name of the Vulnerable Software and Affected Versions Adobe Captivate versions 9 and earlier Description The issue is related to a remote code execution vulnerability in the quiz reporting feature. This vulnerability could be exploited to read and write arbitrary files to the server...
hape.uclip.mobi XSS vulnerability
Open Bug Bounty ID: OBB-250068 Description| Value ---|--- Affected Website:| hape.uclip.mobi Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...