Moderate: Red Hat Security Advisory: qemu-kvm security update

Updated qemu-kvm packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Multiple Vulnerabilities in Cisco Security Agent (cisco-sa-20100217-csa)

According to the version identified on the Management Center for Cisco Agents web interface, the version of Cisco Security Agent installed on the remote host is affected by multiple vulnerabilities : - An unspecified directory traversal vulnerability exists in the Management Center. CVE-2010-0146...

CVE-2013-0148

The CVE-2013-0148 issue affects FairCom c-treeACE’s Data Camouflage (formerly FairCom Standard Encryption). The vulnerability is that the decryption key is not required to access database contents, allowing an attacker to read cleartext records by copying a database to another system configured w...

MS Windows Ancillary Function Driver Privilege Elevation Vulnerabilities (2645640)

This host is missing an important security update according to Microsoft Bulletin MS12-009. OpenVAS Vulnerability Test $Id: secpodms12-009.nasl 5346 2017-02-19 08:43:11Z cfi $ MS Windows Ancillary Function Driver Privilege Elevation Vulnerabilities 2645640 Authors: Antu Sanadi Copyright: Copyrigh...

Microsoft Windows Ancillary Function Driver Privilege Elevation Vulnerabilities (2645640)

This host is missing an important security update according to Microsoft Bulletin MS12-009. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-0148

CVE-2012-0148 affects the Windows Ancillary Function Driver (afd.sys). The vulnerability stems from improper validation of user-mode input before crossing to kernel mode, enabling local privilege escalation. Affected on 64-bit Windows platforms: XP SP2, Server 2003 SP2, Vista SP2, Server 2008 SP2...

Apple Safari Multiple Vulnerabilities (Mar 2011) - Mac OS X

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Safari < 5.0.4 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 5.0.4. It therefore is potentially affected by several issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52613; scriptversion"1.18...

CVE-2011-0148

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0148

WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in...

CVE-2011-0148

CVE-2011-0148 affects WebKit as used in Apple iTunes before 10.2 on Windows. The vulnerability allows a man-in-the-middle attacker to execute arbitrary code or cause a denial of service (memory corruption and app crash) via vectors related to iTunes Store browsing. Nessus/OpenVAS entries corrobor...

Apple iTunes < 10.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 10.2. As such, it is affected by numerous issues in the following components : - ImageIO - libxml - WebKit C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52534; scriptversion"1.21";...

CVE-2010-0148

Cisco Security Agent 5.2 on Linux is affected by a DoS vulnerability (CVE-2010-0148) that can trigger a kernel panic by sending a series of TCP packets. The issue is part of multiple vulnerabilities disclosed in Cisco Security Agent Management Center advisories; the DoS affects Cisco Security Age...

CentOS 5 : cscope (CESA-2009:1102)

An updated cscope package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. cscope is a mature, ncurses-based, C source-code tree browsing tool. Multiple buffer...

CentOS Security Advisory CESA-2009:1102 (cscope)

The remote host is missing updates to cscope announced in advisory CESA-2009:1102. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

FreeBSD Ports: cscope

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

RedHat Security Advisory RHSA-2009:1101

The remote host is missing updates announced in advisory RHSA-2009:1101. cscope is a mature, ncurses-based, C source-code tree browsing tool. Multiple buffer overflow flaws were found in cscope. An attacker could create a specially crafted source code file that could cause cscope to crash or,...

[SECURITY] [DSA 1806-1] New cscope packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1806-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 24, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1806-1] New cscope packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1806-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 24, 2009 http://www.debian.org/security/faq -...

CVE-2009-0148

Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as 1 source-code tokens and 2 pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541...