112 matches found
KB5003694: Windows 7 and Windows Server 2008 R2 Security Update (June 2021)
The remote Windows host is missing security update 5003694. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is...
KB5003646: Windows 10 version 1809 / Windows Server 2019 Security Update (June 2021)
The remote Windows host is missing security update 5003646. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is...
SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2021:0032-1)
This update for java-180-ibm fixes the following issues : Update to Java 8.0 Service Refresh 6 Fix Pack 20 bsc1180063,bsc1177943 CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779 CVE-2020-14798 CVE-2020-14796 CVE-2020-14803 - Class libraries : - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is...
Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20200416)
Security Fixes : - Mozilla: Use-after-free while running the nsDocShell destructor CVE-2020-6819 - Mozilla: Use-after-free when handling a ReadableStream CVE-2020-6820 - Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method CVE-2020-6821 - Mozilla: Memory safety...
CVE-2020-0032
CVE-2020-0032 affects Android Media Framework. The root cause is an out-of-bounds write due to a heap buffer overflow in ih264d_release_display_bufs (ih264d_utils.c), enabling remote code execution in a privileged context. Affected Android versions: 8.0–10. The vulnerability is exploitable via a ...
maidsafe_client (>=0.1.0, <=0.1.2), maidsafe_types (>=0.0.9, <=0.2.3) +8 more potentially affected by unknown CVE via crust (>=0.0.3, <=0.4.2)
crust CARGO version =0.0.3, =0.1.0, =0.0.9, =0.0.3, =0.0.6, =0.1.4, =0.1.0, =0.1.0, =0.1.5, =0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2019-0032...
Critical Photon OS Security Update - PHSA-2019-3.0-0032
Updates of 'openssl', 'curl', 'libvirt' packages of Photon OS have been released...
CVE-2019-0032 Junos Space Service Now and Service Insight: Organization username and password stored in plaintext in log files.
A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to login to the Organization. Affected products are: Juniper...
CVE-2019-0032
The CVE describes an authentication credential leakage issue where Organisation login usernames and passwords are stored in plaintext in log files. A locally authenticated attacker who can access these logs could use the plaintext credentials to login. Affected products are Juniper Networks Servi...
Photon OS 1.0: Linux PHSA-2017-0032
An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0032. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121729;...
Remote Code Execution (RCE)
Microsoft ChakraCore is vulnerable to remote code execution. This is due a lack of validation for return objects without any properties in AsmJs.cpp, which would allow a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2017-0015...
Remote Code Execution (RCE)
Microsoft ChakraCore is vulnerable to remote code execution. This is due to a lack of conversion checks after calls to IsConcatSpreadable which would allow a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different CVE-2017-0010, CVE-2017-0015,...
Photon OS 1.0: Linux PHSA-2017-0032 (deprecated)
An update of linux packages for PhotonOS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0032. The text itself is copyright C VMware, Inc...
CVE-2018-0032
The receipt of a crafted BGP UPDATE can lead to a routing process daemon RPD crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in an extended denial of service condition for the device. This issue only affects the specific versions of Junos OS listed within this...
CVE-2018-0032
The receipt of a crafted BGP UPDATE can lead to a routing process daemon RPD crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in an extended denial of service condition for the device. This issue only affects the specific versions of Junos OS listed within this...
CVE-2018-0032
CVE-2018-0032 affects Juniper Networks Junos OS where receiving a crafted BGP UPDATE can crash and restart the routing process daemon (RPD). Repeated identical crafted updates may cause an extended denial-of-service condition. Affected are specific Junos OS releases: 16.1X65 versions before 16.1X...