VMware ESX Multiple Vulnerabilities (VMSA-2009-0009) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in sudo in file parse.c due to a failure to properly interpret a system group %group in the sudoers configuration file when handling authorization decisions for...

CVE-2016-0037

The forms-based authentication implementation in Active Directory Federation Services ADFS 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of service daemon outage via crafted data, aka "Microsoft Active Directory Federation Services Denial of Service...

CVE-2016-0037

CVE-2016-0037 affects Microsoft Windows Server 2012 R2 with Active Directory Federation Services (ADFS) 3.0 . The issue arises in the forms-based authentication flow, where crafted input can cause a denial of service resulting in a daemon outage and an unresponsive ADFS service. The vulnerability...

openSUSE Security Update : libebml / libmatroska (openSUSE-2016-37)

This update for libebml, libmatroska fixes the following security issues : Vulnerabilities fixed in libebml : - Cisco TALOS-CAN-0036: Invalid memory access when reading from a UTF-8 string resulted in a heap information leak bsc961031. - Cisco TALOS-CAN-0037: Deeply nested elements with infinite...

FreeBSD : moodle -- multiple vulnerabilities (82b3ca2a-8c07-11e5-bd18-002590263bf5)

Moodle Release Notes report : MSA-15-0037 Possible to send a message to a user who blocked messages from non contacts MSA-15-0038 DDoS possibility in Atto MSA-15-0039 CSRF in site registration form MSA-15-0040 Student XSS in survey MSA-15-0041 XSS in flash video player MSA-15-0042 CSRF in lesson...

Updated libebml packages fix security vulnerability

In EbmlMaster::Read in libebml before 1.3.3, when the parser encountered a deeply nested element with an infinite size then a following element of an upper level was not propagated correctly. Instead the element with the infinite size was added into the EBML element tree a second time resulting i...

Oracle: Security Advisory (ELSA-2012-0410)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Memory corruption

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0018, CVE-2015-0037, and CVE-2015-0040...

Memory corruption

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-0018, CVE-2015-0037, and CVE-2015-0066...

CVE-2015-0037

CVE-2015-0040 (Internet Explorer) is a memory-corruption remote-code-execution vulnerability affecting Internet Explorer 11. The CVE family around 2015-0018/0037/0066 describes IE memory corruption via a crafted web page, with related exploit activity (e.g., exploit-db reference for CVE-2015-0040...

Microsoft Internet Explorer Memory Corruption (MS15-009: CVE-2015-0037)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Microsoft Internet Explorer CVE-2015-0037 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

CVE-2014-0037

Zarafa (aka Zarafa Server) is affected by CVE-2014-0037. The vulnerability resides in ValidateUserLogon logic in provider/libserver/ECSession.cpp, allowing a remote attacker to crash the zarafa-server by triggering a NULL pointer issue related to the username. Public disclosures indicate Zarafa 5...

Mandriva Linux Security Advisory : zarafa (MDVSA-2014:044)

Robert Scheck discovered multiple vulnerabilities in Zarafa that could allow a remote unauthenticated attacker to crash the zarafa-server daemon, preventing access to any other legitimate Zarafa users CVE-2014-0037, CVE-2014-0079. The updated packages have been upgraded to the 7.1.8 version which...

Fedora Update for zarafa FEDORA-2014-1883

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for zarafa FEDORA-2014-1900

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : raptor (ELSA-2012-0410)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0410 advisory. 1.4.18-5.1 - Fixed XML entity expansion that could lead to information disclosure CVE-2012-0037 Resolves: rhbz804496 Tenable has extracted the preceding...

Ubuntu Update for raptor2 USN-1901-1

Check for the Version of raptor2 OpenVAS Vulnerability Test $Id: gbubuntuUSN19011.nasl 8448 2018-01-17 16:18:06Z teissa $ Ubuntu Update for raptor2 USN-1901-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

Gentoo Security Advisory GLSA 201209-05 (libreoffice)

The remote host is missing updates announced in advisory GLSA 201209-05. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Slackware Advisory SSA:2009-069-01 curl

The remote host is missing an update as announced via advisory SSA:2009-069-01. OpenVAS Vulnerability Test $Id: esoftslkssa200906901.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...