CVE-2017-3020

CVE-2017-3020 affects Adobe Acrobat Reader prior to specific builds (11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier) with a memory address leak in the weblink module. Connected sources corroborate this CVE as part of a broader set of vulnerabilities in Acrobat/Reader trac...

Adobe Reader DC Weblink Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows a remote attacker to disclose sensitive information on vulnerable installations of Adobe Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

KLA10992 Multiple vulnerabilities in Adobe Acrobat and Adobe Reader

Multiple serious vulnerabilities have been found in Adobe Acrobat and Adobe Reader. Malicious users can exploit these vulnerabilities to execute arbitary code and possibly cause a denial of service. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerabilities in the XML Forms...

OracleVM 3.3 : wget (OVMSA-2014-0036)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access 1156133 - Fix the parsing of weblink when doing recursive retrieving 960137 - Fix errors found by static analysis of source code 873216 ...

Facebook Warns Users About Timeline Adware

Facebook issued a video warning to its hundreds of millions of users on Thursday about the dangers of adware programs that lure users with promises of special features. In a video message from the Facebook Security group, the company said that a growing number of companies are fooling Facebook...

Joomla! Component Weblinks - 'Itemid' SQL Injection

source: https://www.securityfocus.com/bid/42455/info The 'comweblinks' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Fujitsu Jasmine HTTP Response Splitting Vulnerability When Executing WebLink Template

Overview A vulnerability exists in Fujitsu Jasmine where HTTP response splitting may be conducted when the WebLink template is executed. Impact An attacker could insert arbitrary HTTP headers and launch HTTP response splitting attacks. Solution Please refer to the 'Vendor Information' section for...

Crlf injection

CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

[20081102] - Core - com_weblinks XSS vulnerability

comweblinks allows raw HTML into the title and description tags for weblink submissions from both the administrator and site submission forms...

Jasmine WebLink Template Multiple Vulnerabilities

Overview Jasmin WebLink is vulnerable to buffer overflow BOF, denial of service DoS and cross-site scripting XSS when executing templates. Impact A remote attacker could execute arbitrary code or cause a Denial of Service DoS condition against vulnerable Web sites. Solution Please refer to the...

CVE-2006-2899

Unspecified vulnerability in ESTsoft InternetDISK versions before 2006/04/20 allows remote authenticated users to execute arbitrary code, possibly by uploading a file with multiple extensions into the WebLink directory...

Design/Logic Flaw

Joomla! 1.0.7 and earlier allows attackers to bypass intended access restrictions and gain certain privileges via certain attack vectors related to the 1 Weblink, 2 Polls, 3 Newsfeeds, 4 Weblinks, 5 Content, 6 Content Section, 7 Content Category, 8 Contact items, or 9 Contact Search, 10 Content...

CVE-2006-1048

Joomla! 1.0.7 and earlier allows attackers to bypass intended access restrictions and gain certain privileges via certain attack vectors related to the 1 Weblink, 2 Polls, 3 Newsfeeds, 4 Weblinks, 5 Content, 6 Content Section, 7 Content Category, 8 Contact items, or 9 Contact Search, 10 Content...