Photon OS 1.0: Glibc / Shadow / Systemd / Wget PHSA-2017-0023 (deprecated)

An update of systemd,wget,shadow,glibc packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0023. The text itself is copyright C...

CVE-2018-0023

CVE-2018-0023 affects JSNAPy, the Python-based Junos Snapshot Administrator. It exploits insecure, world-writable default configuration and sample files created in JSNAPy versions prior to 1.3.0, allowing unprivileged local users to alter files under the JSNAPy directory (insert unintended action...

CVE-2017-14471

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

Oracle Linux 7 : qemu-kvm (ELSA-2018-0023)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2018-0023 advisory. - Fix CVE-2017-5715 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

RHEL 7 : qemu-kvm (RHSA-2018:0023)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0023 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm package provides the...

CVE-2016-0023

...

CVE-2017-0023

The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted PDF file, aka "Microsoft PDF Remote Code Execution Vulnerability."...

CVE-2017-0023

CVE-2017-0023 is a remote code execution vulnerability in the Microsoft Edge PDF Library, affecting Windows 8.1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10 (variants such as 1511/1607). Public reports describe memory corruption in the PDF rendering library leading to arbitrary co...

Microsoft Windows PDF Library CVE-2017-0023 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected Microsof...

Microsoft PDF Memory Corruption (MS17-007: CVE-2017-0023)

A vulnerability exists in Microsoft EDGE and Windows PDF Library that could lead to an out of bound memory access. The issue is caused by mishandling of preblending parameters in sub mask images of certain crafted PDF files. A remote attacker can exploit this vulnerability by enticing a user to...

MS17-009: Security Update for Microsoft Windows PDF Library (4010319)

The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the Windows PDF Library due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this vulnerability, by convincing a user to open a...

VMware ESXi updates address a cross-site scripting issue (VMSA-2016-0023)

The ESXi Host Client contains a vulnerability that may allow for stored cross-site scripting XSS. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Mageia: Security Advisory (MGASA-2016-0023)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0023

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0025...

Memory corruption

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0023...

CVE-2015-0023

CVE-2015-0023 refers to a memory corruption vulnerability in Internet Explorer 10 that can be exploited via a crafted web site to execute arbitrary code or cause a crash. Connected documents indicate that MS15-009 (security update 3034682) patches Internet Explorer and the update is required for ...

Microsoft Internet Explorer Memory Corruption (MS15-009: CVE-2015-0023)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Oracle Linux 3 : httpd (ELSA-2009-1108)

From Red Hat Security Advisory 2009:1108 : Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server...

Oracle Linux 5 : apr-util (ELSA-2009-1107)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1107 advisory. 1.2.7-7.el53.1 - add security fixes for CVE-2009-0023, CVE-2009-1955, and CVE-2009-1956 504560 Tenable has extracted the preceding description block...

CVE-2013-0023

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Internet Explorer CDispNode Use After Free Vulnerability."...