162 matches found
CVE-2013-0098
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-0098
Hyper-V in Microsoft Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows guest OS users, running as virtual machines, to cause a denial of service via a crafted application, aka "Hyper-V Denial of Service Vulnerability." This vulnerability is different from those described in...
CVE-2017-0098
CVE-2017-0098 concerns a Hyper-V Denial of Service vulnerability in Microsoft Windows: affected are Windows 10 Gold, 1511, 1607 and Windows Server 2016, where guest OS users running as VMs can cause a host DoS via a crafted application. Connected documents corroborate the vulnerability’s existenc...
Virtuozzo Linux Errata and Bugfix Advisory 2017:0098
Upstream security update. Follow RHBA-2017-0098 for details...
CVE-2016-0098
CVE-2016-0098 is a remote-code-execution flaw in Microsoft Windows media handling (Windows Media parsing) affecting Windows 7 SP1, Windows 8.1, Windows Server 2008 R2 SP1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10. An attacker can trigger arbitrary code execution by convincing a...
Microsoft Windows CVE-2016-0098 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft Window...
Microsoft Windows Media Player Remote Code Execution (MS16-027: CVE-2016-0098)
A remote code execution vulnerability has been reported in Microsoft Windows Media Player. The vulnerability is due to an error in Microsoft Windows Media Player while handling specially crafted media content. A remote attacker could trigger this flaw by convincing a victim to open a specially...
Mageia: Security Advisory (MGASA-2016-0098)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory for apache2 (SUSE-SU-2014:1080-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux: Security Advisory (ALAS-2014-331)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Juniper NSM < 2012.2R9 Apache HTTP Server Multiple Vulnerabilities (JSA10685)
The remote host is running a version of NSM Network and Security Manager Server that is prior to 2012.2R9. It is, therefore, affected by multiple vulnerabilities in the bundled version of Apache HTTP Server : - A flaw exists due to improper escaping of filenames in 406 and 300 HTTP responses. A...
Marktplaats: Multiple Apache 2.2.22 Vulnerabilities (XSS/ Code Exec/ DoS)
Hello, Your current version of apache 2.2.22 for http://aanbieding.marktplaats.com is vulnerable to many issues like DoS, XSS and Code Exec 1. DoS Refer: http://www.cvedetails.com/cve/CVE-2014-0231/ http://www.cvedetails.com/cve/CVE-2014-0098/ http://www.cvedetails.com/cve/CVE-2013-6438/...
Microsoft Windows Task Scheduler CVE-2015-0098 Remote Privilege Escalation Vulnerability
Description Microsoft Windows Kernel is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges within the context of the System account. Technologies Affected Avaya Meeting Exchange - Client Registration Server 5.0 Avaya Meeting Exchan...
KLA10560 Privilege escalation vulnerability in Microsoft products
An unspecified vulnerability was found in Microsoft products. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a specially designed task. Original advisories MS15-037 CVE-2015-0098 Related products Microsoft-Windows-7...
openSUSE Security Update : apache2 (openSUSE-SU-2014:1647-1)
This apache version update fixes various security and non security issues. - Updated to the 2.2.29 - Changes between 2.2.22 and 2.2.29: http://www.apache.org/dist/httpd/CHANGES2.2 - The following patches are no longer needed and were removed : - httpd-2.2.x-bnc798733-SNIignorecase.diff -...
Amazon Linux AMI : httpd (ALAS-2014-331)
It was found that the moddav module did not correctly strip leading white space from certain elements in a parsed XML. In certain httpd configurations that use the moddav module for example when using the moddavsvn module, a remote attacker could send a specially crafted DAV request that would...
openSUSE Security Update : apache2 (openSUSE-SU-2014:1045-1)
This apache2 update fixes the following security issues : - CRIME types of attack, based on size and timing analysis of compressed content, are now mitigated by the new SSLCompression directive, set to 'no' in /etc/apache2/ssl-global.conf - ssl-global.conf: SSLHonorCipherOrder set to on -...
security issues addressed, most notably the mod_security heap overflow known as CVE-2014-0226 (important)
apache2: - ECC support was added to modssl - fix for a race condition in modstatus known as CVE-2014-0226 can lead to information disclosure; modstatus is not active by default, and is normally only open for connects from localhost. - fix for bug known as CVE-2014-0098 that can crash the apache...
SuSE 11.3 Security Update : Apache Web Server (SAT Patch Number 9542)
This update for the Apache Web Server provides the following fixes : - Fixed a heap-based buffer overflow on apache module modstatus. bnc887765, CVE-2014-0226 - Properly remove whitespace characters from CDATA sections to avoid remote denial of service by crashing the Apache Server process...
RHEL 5 / 6 : JBoss EAP (RHSA-2014:0826)
Updated httpd packages that fix two security issues are now available for Red Hat JBoss Enterprise Application Platform 6.2 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS...