CVE-2014-0137

SQL injection vulnerability in the savedreportdelete action in the ReportController in Red Hat CloudForms Management Engine CFME before 5.2.3.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, related to MiqReportResult.exists...

CVE-2014-0137

SQL injection vulnerability in the savedreportdelete action in the ReportController in Red Hat CloudForms Management Engine CFME before 5.2.3.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, related to MiqReportResult.exists...

CVE-2014-0137

CFME/CloudForms contains an SQL injection in the saved_report_delete action of the ReportController (MiqReportResult.exists) that can be exploited by an authenticated remote user. Affected versions: Red Hat CloudForms Management Engine prior to 5.2.3.2. Reported remediation: upgrade to 5.2.3.2 or...

Important: Red Hat Security Advisory: cfme security, bug fix, and enhancement update

Updated cfme packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat CloudForms 3.0. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, whi...

Multiple Vendors EAS Authentication Bypass

The remote EAS device permits root login using an SSH key with a publicly available private key. The private key was included in older copies of Monroe Electronics and Digital Alert Systems firmware. A remote attacker with access to the private key can bypass authentication of the root user...

Oracle Linux 6 : texlive (ELSA-2012-0137)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0137 advisory. 2007-57 - fix CVE-2010-2642 CVE-2011-0433 CVE-2011-0764 CVE-2011-1552 CVE-2011-1553 CVE-2011-1554, texlive various flaws 773183 Tenable has extracted t...

CVE-2013-0137

Summary (CVE-2013-0137) The Digital Alert Systems DASDEC‑I/II and Monroe Electronics R189 One‑Net EAS devices released before firmware version 2.0‑2 contained a publicly available private SSH key in firmware, enabling remote attackers with SSH access to log in as root and spoof alerts. The issue ...

Microsoft Office Visio Viewer Remote Code Execution Vulnerabilities (2663510)

This host is missing an important security update according to Microsoft Bulletin MS12-015. OpenVAS Vulnerability Test $Id: secpodms12-015.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Visio Viewer Remote Code Execution Vulnerabilities 2663510 Authors: Antu Sanadi Copyright: Copyrigh...

CVE-2012-0137

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...

Memory corruption

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...

Memory corruption

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...

CVE-2012-0137

CVE-2012-0137 concerns Microsoft Visio Viewer 2010 Gold and SP1 where memory is not properly managed while parsing VSD files, allowing remote code execution via crafted attributes. Connected sources corroborate a family of related Visio vulnerabilities (MS12-015) and indicate a memory corruption ...

Microsoft Visio Viewer File Format Code Execution (MS12-015; CVE-2012-0137)

A remote code execution vulnerability has been reported in Microsoft Visio Viewer...

MS12-015: Vulnerabilities in Microsoft Visio Viewer 2010 Could Allow Remote Code Execution (2663510)

The version of Microsoft Visio Viewer installed on the remote Windows host is reportedly affected by several memory corruption vulnerabilities due to the way the application handles memory when parsing specially crafted Visio files. An attacker who tricked a user on the affected host into opening...

Apple Safari Multiple Vulnerabilities (Mar 2011) - Mac OS X

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Safari < 5.0.4 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 5.0.4. It therefore is potentially affected by several issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52613; scriptversion"1.18...

CVE-2011-0137

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0137

CVE-2011-0137 affects WebKit as used in Apple iTunes before 10.2 on Windows. Vulnerability allows a man-in-the-middle attacker to execute arbitrary code or cause a memory-corruption–driven denial of service via iTunes Store browsing vectors. Public references indicate Apple security updates HT456...

CVE-2011-0137

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

Apple iTunes < 10.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.2. As such, it is affected by numerous issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52534; scriptversion"1.21";...