Virtuozzo Linux Errata and Bugfix Advisory 2017:0088

Upstream security update. Follow RHBA-2017-0088 for details...

CVE-2016-0088

CVE-2016-0088 corresponds to a Hyper-V remote code execution vulnerability in Microsoft Windows Hyper-V affecting Windows 8.1, Windows Server 2012 (Gold/R2), and Windows 10. The root cause is that Hyper-V fails to properly validate guest OS input from an authenticated user, enabling a crafted app...

CVE-2016-0088

Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to execute arbitrary code on the host OS via a crafted application, aka "Hyper-V Remote Code Execution Vulnerability."...

MS16-045: Security Update for Windows Hyper-V (3143118)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An arbitrary code execution vulnerability exists in Hyper-V due to a failure to properly validate input from an authenticated user on a guest operating system. An attacker can exploit...

Oracle: Security Advisory (ELSA-2010-0088)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0088

CVE-2015-0088 is referenced in connected Project Zero posts as an off-by-x out-of-bounds read/write issue related to the Type 2 Charstring/operand stack in ATMFD.DLL/OpenType handling. The supplied connected documents do not provide explicit product versions, root-cause analysis, impact details, ...

CVE-2014-0088

The SPDY implementation in the ngxhttpspdymodule module in nginx 1.5.10 before 1.5.11, when running on a 32-bit platform, allows remote attackers to execute arbitrary code via a crafted request...

CVE-2014-0088

The SPDY implementation in the ngxhttpspdymodule module in nginx 1.5.10 before 1.5.11, when running on a 32-bit platform, allows remote attackers to execute arbitrary code via a crafted request...

CVE-2014-0088

The CVE-2014-0088 issue affects nginx 1.5.10, where the SPDY-enabled ngx_http_spdy_module on 32-bit platforms allows remote code execution via a crafted request. The root cause is memory corruption in the SPDY module, leading to arbitrary code execution when processing crafted inputs. The vulnera...

SPDY memory corruption

SPDY memory corruption Severity: major CVE-2014-0088 Not vulnerable: 1.5.11+ Vulnerable: 1.5.10...

Internet Bug Bounty: SPDY memory corruption

A bug in the experimental SPDY implementation in nginx 1.5.10 was found, which might allow an attacker to corrupt worker process memory by using a specially crafted request, potentially resulting in arbitrary code execution CVE-2014-0088. The problem only affects nginx 1.5.10 on 32-bit platforms,...

nginx -- SPDY memory corruption

The nginx project reports: A bug in the experimental SPDY implementation in nginx 1.5.10 was found, which might allow an attacker to corrupt worker process memory by using a specially crafted request, potentially resulting in arbitrary code execution CVE-2014-0088. The problem only affects nginx...

InTouch index.php user Parameter SQL Injection - Ver2 (CVE-2006-0088)

An SQL injection vulnerability has been reported in inTouch. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Microsoft Internet Explorer Multiple Use After Free Vulnerabilities (2809289)

This host is missing a critical security update according to Microsoft Bulletin MS13-021. OpenVAS Vulnerability Test $Id: secpodms13-021.nasl 6115 2017-05-12 09:03:25Z teissa $ Microsoft Internet Explorer Multiple Use After Free Vulnerabilities 2809289 Authors: Thanga Prakash S Copyright: Copyrig...

CVE-2013-0088

CVE-2013-0088 is a use-after-free vulnerability in Microsoft Internet Explorer 6–10 that could allow remote code execution when a user visits a crafted page triggering access to a freed object. Connected sources confirm the vulnerable software range (IE6–IE10) and describe a memory-access flaw th...

MS13-021: Security Update for Internet Explorer (2809289)

The remote host is missing Internet Explorer IE Security Update 2809289. The installed version of IE is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid6521...

RHEL 5 : kvm (RHSA-2010:0088)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0088 advisory. - kvm-userspace-rhel5: usb-linux.c: fix buffer overflow CVE-2010-0297 - kvm: emulator privilege escalation CVE-2010-0298 - kvm: emulator...

CVE-2012-0088

CVE-2012-0088 concerns an unspecified vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (versions 8.9, 9.0, 9.1). The description states that remote authenticated users can affect confidentiality via unknown vectors related to Benefits Administration; the exac...

CVE-2012-0088

Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 8.9, 9.0, and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Benefits Administration...

CentOS Update for java CESA-2010:0339 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...