Adobe Acrobat DC (Continuous Track) Security Updates (APSB18-41) - Windows

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe's Year-End Update Patches 87 Flaws in Acrobat Software

Adobe is closing out this year with its December Patch Tuesday update to address a massive number of security vulnerabilities for just its two PDF apps—more than double the number of what Microsoft patched this month for its several products. Adobe today released patches for 87 vulnerabilities...

Adobe Acrobat and Reader Security Bypass Vulnerability (CNVD-2019-09054)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. A security bypass vulnerability exists in Adobe Acrobat and Reader. An attacker can exploit this vulnerability to achieve elevation of privilege...

KLA11391 Use after free vulnerability in Google Chrome

Use afrer free vulnerability was found in Google Chrome’s. This vulnerability related to PDFium component. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Stable Channel Update for Desktop Related products Google-Chrome CVE li...

KLA11384 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities can be exploited remotely to spoof user interface; 2. Multiple memory...

Microsoft Exchange Server CVE-2018-8604 Tampering Security Bypass Vulnerability

Description Microsoft Exchange Server is prone to a security bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Exchange Server 2016 Cumulative Update 10 Microsoft Exchange Server 2016...

Adobe Acrobat and Reader Security bypass (APSB18-41: CVE-2018-16044)

A security bypass vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...

KLA11883 ACE vulnerability in Microsoft Azure

A cross-site-scripting XSS vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2018-8652 Related products Microsoft-Windows Microsoft-Azure CVE list CVE-2018-8652 warning KB list 4480788 Solution Install...

Adobe Acrobat and Reader Security bypass (APSB18-41: CVE-2018-16042)

A security bypass vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...

Adobe Acrobat and Reader Security bypass (APSB18-41: CVE-2018-16045)

A security bypass vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...

chromium-browser: Insufficient policy enforcement in Blink

Incorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass content security policy via a crafted HTML page...

BusyBox 1.27.2 suffers from a security restriction bypass vulnerability

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. A security restriction bypass vulnerability exists in BusyBox 1.27.2. An attacker can exploit this vulnerability to bypass security restrictions...

Artifex Software Ghostscript Security Bypass Vulnerability

Artifex Software Ghostscript is an open source Postscript a page description language and programming language used in the electronics industry and desktop publishing parser from Artifex Software that displays Postscript files and prints them on non-Postscript printers. print Postscript files on...

KLA11598 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An out-of-bounds read in V8 can be exploited remotely to...

Node.js: Fix for CVE-2018-12122 can be bypassed via keep-alive requests

Summary: Fix for CVE-2018-12122 can be bypassed via keep-alive requests Description: I'm not a security expert, neither I'm familiar with Node.js core, so please forgive me if this report is inaccurate and in that case, sorry for your time. While investigating the issue 515I checked out the fix t...

Tarantella Enterprise Security Bypass Vulnerability

Exploit for cgi platform in category web applications &ms=unique Where the parameter un is the username you know. You recive the message: "The content of this file must be language independent! This applet immediately loads a new document in a named frame here WebtopFrame, which will be so...

Tarantella Enterprise Security Bypass

Vulnerability found in 2009. &ms=unique Where the parameter un is the username you know. You recive the message: "The content of this file must be language independent! This applet immediately loads a new document in a nam...

Samba Security Bypass and Denial of Service Vulnerabilities

Samba is a freeware implementation of the SMB protocol on Linux and UNIX systems, consisting of a server and a client program. Samba suffers from a security bypass vulnerability and a denial-of-service vulnerability that can be exploited by an attacker to conduct a brute-force attack...

KLA11377 Multiple vulnerabilities in Wireshark

Multiple serious vulnerabilities were found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A heap buffer over-read vulnerability in the Wireshark dissection engine can be...

Consona Password Reset Security Bypass Vulnerability

Exploit for php platform in category web applications 8 years ago, I discovered this vulnerability, CVE-2010-1910, and now, you can see the details. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1910 The login page, "/sdcxuser/asp/login.asp", had a commented access to the page that...