Microsoft Windows Adobe Font Driver CVE-2015-0091 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Avaya...

Microsoft Internet Explorer CElement 释放后重用远程代码执行漏洞(CVE-2013-0091)(MS13-021)

BUGTRAQ ID: 58346 CVECAN ID: CVE-2013-0091 Microsoft Internet Explorer是微软公司推出的一款网页浏览器。 Microsoft Internet Explorer 6/7/8/9/10在CElement的实现上存在释放后重用远程代码执行漏洞，在用户使用 Internet Explorer 查看特制网页时允许远程执行代码。成功利用这些漏洞的攻击者可以获得与当前用户相同的用户权限。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 0 Microsoft Internet Explorer 9...

Microsoft Internet Explorer Multiple Use After Free Vulnerabilities (2809289)

This host is missing a critical security update according to Microsoft Bulletin MS13-021. OpenVAS Vulnerability Test $Id: secpodms13-021.nasl 6115 2017-05-12 09:03:25Z teissa $ Microsoft Internet Explorer Multiple Use After Free Vulnerabilities 2809289 Authors: Thanga Prakash S Copyright: Copyrig...

CVE-2013-0091

CVE-2013-0091 corresponds to a use-after-free vulnerability in Microsoft Internet Explorer 8 (CElement) that allows remote code execution via a crafted web page, as described across multiple sources (IE use-after-free, MS13-021 patch 2809289). Impact is remote code execution with the attacker pot...

MS13-021: Security Update for Internet Explorer (2809289)

The remote host is missing Internet Explorer IE Security Update 2809289. The installed version of IE is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid6521...

Cross site scripting

Cross-site scripting XSS vulnerability in dopvSTAR 0091 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled during display of the access log...

CVE-2013-0709

CVE-2013-0709 concerns a cross-site scripting (XSS) vulnerability in the dopvSTAR* 0091 product. The issue arises from how the HTTP Referer header is handled during display of the access log, allowing remote attackers to inject arbitrary web script or HTML. The connected JVN entries confirm the a...

CVE-2012-0091

CVE-2012-0091 concerns an unspecified vulnerability in Oracle PeopleSoft, specifically the PeopleTools component (8.52.05), that could allow remote authenticated users to affect integrity and availability via unknown vectors related to Upgrade Change Assistance. The connected documents do not pro...

CentOS Update for java CESA-2010:0339 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-0091

Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption, which allows man-in-the-middle attackers to spoof network traffic and obtain sensitive information via a DES downgrade, aka "Kerberos Spoofing Vulnerabilit...

CVE-2011-0091

The CVE-2011-0091 issue affects Kerberos in Windows 7 and Windows Server 2008 R2, where sessions can be downgraded from strong encryption to DES. This enables man-in-the-middle attackers to spoof traffic and potentially access sensitive data within Kerberos sessions. Root cause: Windows Kerberos ...

Microsoft Kerberos Privilege Escalation Vulnerabilities (2496930)

This host is missing a critical security update according to Microsoft Bulletin MS11-013. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SuSE 11.1 Security Update : IBM Java 6 (SAT Patch Number 2553)

This update of IBM Java 6 to Service Request 8 to fixes the following security issues : - Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality via unkno...

SuSE 11 Security Update : IBM Java 6 (SAT Patch Number 2548)

This update of IBM Java 6 to SR 8 to fixes the following security issues : - Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality via unknown vectors...

SuSE 11 / 11.1 Security Update : IBM Java / Java (SAT Patch Numbers 2812 / 2813)

This update brings IBM Java 1.4.2 to SR13 FP5, fixing various bugs and security issues : - Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.225 allows remote attackers to affect confidentiality via...

SuSE 11 Security Update : Sun Java 6 (SAT Patch Number 2225)

Sun Java 6 was updated to Update 19, fixing a large number of security issues: CVE-2009-3555 / CVE-2010-0082 / CVE-2010-0084 / CVE-2010-0085 / CVE-2010-0087 / CVE-2010-0088 / CVE-2010-0089 / CVE-2010-0090 / CVE-2010-0091 / CVE-2010-0092 / CVE-2010-0093 / CVE-2010-0094 / CVE-2010-0095 /...

SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7106)

This update brings IBM Java 1.4.2 to SR13 FP5, fixing various bugs and %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid49862;...

SuSE 10 Security Update : IBM Java 1.5.0 (ZYPP Patch Number 7077)

This update of IBM Java 1.5.0 to SR11 FP2 to fixes the following security issues : - Various unspecified and undocumented vulnerabilities that allows remote attackers to affect confidentiality, integrity and availability via various unknown vectors. CVE-2010-0084 / CVE-2010-0085 / CVE-2010-0087 /...

Fedora 11 : java-1.6.0-openjdk-1.6.0.0-34.b17.fc11 (2010-6039)

Add latest security patches. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Low: Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.3. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...