The vulnerability of XSLT programs for viewing and editing PDF files in Adobe Reader, Adobe Acrobat Document Cloud, Adobe Acrobat, and Adobe Reader Document Cloud allows attackers to execute arbitrary code.

The vulnerability of XSLT programs for viewing and editing PDF files in Adobe Reader, Adobe Acrobat Document Cloud, Adobe Acrobat, and Adobe Reader Document Cloud arises from operations that go beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrar...

CVE-2017-4989

CVE-2017-4989 affects EMC Avamar Server Software releases listed (7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401). Root cause: unauthenticated remote bypass of authentication to access the system maintenance page, enabling viewing of sensitive info and execution of maintenance tas...

CVE-2017-2813

An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A specially crafted jpeg2000 image can cause an integer overflow leading to wrong memory allocation resulting in arbitrary code execution. Vulnerability can be triggered by viewing the...

Information Disclosure

Moodle is vulnerable to information disclosure. It's possible for remote attackers to view the profiles images of users' accounts...

Information Disclosure

Moodle is vulnerable to information disclosure. The attacks exist because the checking of whose badges are being viewed is not done in the correct context, allowing an authenticated user to discern the other users' badges without their permissions...

Unspecified Vulnerability in Multiple Mimosa Products

Mimosa Client Radios, Mimosa Backhaul Radios, and Mimosa Access Points are all products of Mimosa Networks, Inc.Mimosa Client Radios is a hypervisor for the client devices of the Mimosa Multi-Point solution. Mimosa Backhaul Radios is a hypervisor for broadband backhaul devices.Mimosa Access Point...

Directory traversal

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software prior to Release 11.1 could allow an authenticated, remote attacker to view any file on an affected system. The vulnerability exists because the affected software does not perform proper input validation of HT...

CVE-2017-8383

Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder...

CVE-2017-8383

Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder...

WikiLeaks Reveals CIA Tool 'Scribbles' For Document Tracking

Update WikiLeaks released details on what it said is a Central Intelligence Agency document tracking program called Scribbles, part of the agency’s effort to keep tabs on documents leaked to whistleblowers and journalists. Scribbles allegedly embeds a web beacon-style tag into watermarks located ...

Summer Baby Zoom Wifi Monitor & Internet Viewing System Authentication Bypass Vulnerability

Summer Baby Zoom Wifi Monitor and Internet Viewing System is a wireless internet monitoring video system. A security vulnerability exists in the Summer Baby Zoom Wifi Monitor&Internet Viewing System. A remote attacker could exploit this vulnerability to bypass authentication...

Summer Baby Zoom Wifi Monitor & Internet Viewing System Elevation of Privilege Vulnerability

Summer Baby Zoom Wifi Monitor and Internet Viewing System is a wireless internet monitoring video system. An elevation of privilege vulnerability exists in the Summer Baby Zoom Wifi Monitor&Internet Viewing System. An attacker can exploit this vulnerability to gain privileges...

CVE-2015-2888

Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to bypass authentication, related to the MySnapCam web service...

CVE-2015-2889

The Summer Baby Zoom Wifi Monitor & Internet Viewing System is affected by CVE-2015-2889, which allows remote attackers to gain privileges through manual entry of a Settings URL. Publicly available details describe an elevation of privilege vulnerability that can be exploited over a network witho...

CVE-2015-2888

The CVE-2015-2888 entry concerns the Summer Baby Zoom Wifi Monitor & Internet Viewing System. Affected component/issue is authentication bypass related to the MySnapCam web service, enabling remote attackers to bypass authentication over the network. CVSS data in the document shows a high/severe ...

CVE-2015-2888: Missing Authentication for Critical Function

Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to bypass authentication, related to the MySnapCam web service...

PT-2017-6622

Name of the Vulnerable Software and Affected Versions Summer Baby Zoom Wifi Monitor & Internet Viewing System affected versions not specified Description The issue allows remote attackers to bypass authentication, related to the MySnapCam web service. Recommendations At the moment, there is no...

PT-2017-6623

Name of the Vulnerable Software and Affected Versions Summer Baby Zoom Wifi Monitor & Internet Viewing System affected versions not specified Description The issue allows remote attackers to gain privileges via manual entry of a Settings URL. Recommendations At the moment, there is no information...

CVE-2015-2889: Undefined Security Weakness

Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to gain privileges via manual entry of a Settings URL...

CVE-2017-7414

In HordeCrypt before 2.7.6, as used in Horde Groupware Webmail Edition 5.x through 5.2.17, OS Command Injection can occur if the user has PGP features enabled in the user's preferences, and has enabled the "Should PGP signed messages be automatically verified when viewed?" preference. To exploit...