Security Bulletin: The IBM FlashSystem V840 product model numbers AC0 and AC1 nodes are affected by vulnerabilities in Apache’s Struts library

Summary Security vulnerabilities have been discovered in Apache’s Struts library Vulnerability Details CVE-ID: CVE-2014-0112, CVE-2014-0094, & CVE-2014-0050 DESCRIPTION: FlashSystem V840 model number -AC0, and –AC1 nodes use the Apache Struts library. Struts is used only by the Service Assist GUI...

Security Bulletin: The IBM V840 product model number AE1 node is affected by vulnerabilities in Apache’s Struts library

Summary Security vulnerabilities have been discovered in Apache’s Struts library Vulnerability Details CVE-ID: CVE-2014-0112, CVE-2014-0094, & CVE-2014-0050 DESCRIPTION: FlashSystem V840-AE1 uses the Apache Struts library. Struts is used only by the Service Assist GUI. CVE-2014-0112 Apache Struts...

CVE-2018-0094

CVE-2018-0094 affects Cisco UCS Central Software. The issue arises in IPv6 ingress packet processing due to insufficient rate limiting for IPv6 traffic, enabling an unauthenticated, remote attacker to trigger a denial of service via high CPU utilization. Connected documents confirm the vulnerabil...

RedHat Update for linux-firmware RHSA-2018:0094-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache Struts < 1.3.10 / < 2.3.16.2 - ClassLoader Manipulation Remote Code Execution Exploit

Exploit for windows platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Apache Struts ClassLoader Manipulation Remote Code Execution',...

CVE-2017-0094

CVE-2017-0094 describes a remote code execution in Microsoft scripting engines when handling objects in memory in Microsoft browsers. The connected document CPAI-2018-0053 adds concrete details for CVE-2017-0134: a remote code execution in Microsoft Edge scripting engine due to memory handling of...

KLA10968 Multiple vulnerabilities in Microsoft Edge

Multiple serious vulnerabilities have been found in Microsoft Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information and bypass security restrictions. Below is a complete list of vulnerabilities: 1. An incorrect handling of...

Microsoft Edge Scripting Engine Memory Corruption (MS17-007: CVE-2017-0094)

A Memory Corruption Vulnerability exists in Microsoft Edge. The vulnerability is due to the way JavaScript engine renders when handling objects in memory. A remote unauthenticated attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...

Virtuozzo Linux Errata and Bugfix Advisory 2017:0094

Upstream security update. Follow RHBA-2017-0094 for details...

Windows bitmap内核释放后重用漏洞(CVE-2016-0094)

No description provided by source...

CVE-2016-0094

creationtimestamp| type| source ---|---|--- 2016-04-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39647 2026-07-29 12:01:43+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:02:00+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPB...

CVE-2016-0094

The CVE-2016-0094 entry concerns a local elevation-of-privilege vulnerability in Windows kernel-mode Win32k driver affecting Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 (Gold and 1511). The root cause is a flaw in the kern...

Microsoft Kernel-Mode Drivers Privilege Elevation Vulnerabilities (3143145)

This host is missing an important security update according to Microsoft Bulletin MS16-034. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-034: Security Update for Windows Kernel-Mode Drivers to Address Elevation of Privilege (3143145)

The remote Windows host is missing a security update. It is, therefore, affected by multiple flaws in the Win32k kernel-mode driver due to improper handling of objects in memory. An authenticated, remote attacker can exploit these, via a specially crafted application, to elevate privileges,...

MySQL Enterprise Monitor 3.0.x < 3.0.11 Multiple Vulnerabilities

According to its self-reported version, the MySQL Enterprise Monitor running on the remote host is affected by multiple vulnerabilities : - A flaw exists within 'MultipartStream.java' in Apache Commons FileUpload when parsing malformed Content-Type headers. A remote attacker, using a crafted...

CVE-2015-0094

CVE-2015-0094 is a Windows kernel-mode driver information-disclosure vulnerability where the affected kernel components do not properly restrict address information during a function call, enabling local attackers to bypass ASLR. Affected products include multiple Windows versions listed in sourc...

Microsoft Windows Kernel-Mode Driver Privilege Elevation Vulnerabilities (3034344)

This host is missing an important security update according to Microsoft Bulletin MS15-023. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-023: Vulnerabilities in Kernel-Mode Driver Could Allow Elevation of Privilege (3034344)

The version of Windows running on the remote host is affected by the following vulnerabilities : - Information disclosure vulnerabilities exist in the kernel-mode driver that can reveal portions of kernel memory. An attacker can exploit these and gain information about the system, which can then ...

Security Advisory-Apache Struts2 vulnerability on Huawei multiple products

Some versions of Apache Struts2 software used in Huawei devices have security vulnerabilities. A patch released for the software to fix vulnerabilities CVE-2014-0050 and CVE-2014-0094 has the risk of being bypassed. Vulnerability ID: HWPSIRT-2014-0420 This Vulnerability has been assigned Common...

Apache Struts ClassLoader Manipulation Remote Code Execution

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Apache Struts ClassLoader Manipulation Remote Code Execution', 'Description' = %q This module...