Open Cloud Integrity Technology and OpenAttestation Advisory

Summary: Multiple potential security vulnerabilities in Open Cloud Integrity Technology Open CIT and OpenAttestation may allow information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-0179 Description:...

Photon OS 1.0: Ntp / Linux PHSA-2018-1.0-0180 (deprecated)

An update of 'ntp', 'linux', 'linux-esx' packages of Photon OS has been released. This kernel update mitigates the vulnerability CVE-2018-3620 commonly referred as L1 terminal fault L1TF. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in...

Critical Photon OS Security Update - PHSA-2018-0180

Updates of 'linux', 'ntp', 'linux-esx' packages of Photon OS have been released...

Security Bulletin: Information Server Connector Migration Tool allows a user with limited role to create/modify/replace some jobs (CVE-2015-0180)

Summary A user with limited role may be able to create/modify/delete specific types of jobs. Vulnerability Details CVEID: CVE-2015-0180 DESCRIPTION: IBM Information Server Connector Migration Tool could allow a user with limited role to create/modify/delete specific types of jobs that they do not...

CVE-2018-0180

Cisco IOS Software CVE-2018-0180 describes multiple DoS vulnerabilities in the Login Enhancements (Login Block) feature, enabling an unauthenticated, remote attacker to trigger a device reload. Affected are Cisco devices running IOS releases 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. The root ca...

CVE-2017-0180

Technical details for CVE-2017-0180 are not publicly provided in the connected documents. Available sources reference Hyper-V Network Switch input validation issues but do not disclose affected versions, root cause specifics, or exploit information. Monitor for updates.

Microsoft Windows Monthly Rollup (KB4015550)

This host is missing a monthly rollup according to Microsoft KB4015550. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Monthly Rollup (KB4015549)

This host is missing a monthly rollup according to Microsoft security update KB4015549. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security update for the Hyper-V vulnerability in Windows Server 2008: April 11, 2017

Security update for the Hyper-V vulnerability in Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, see the following Common Vulnerabilities and Exposures CVE. CVE-2017-0163 CVE-2017-0168 CVE-2017-0180 More Information Important If you install a language pack after...

Oracle Linux 6 / 7 : java-1.8.0-openjdk (ELSA-2017-0180)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0180 advisory. 1:1.8.0.121-0.b13 - Update to aarch64-jdk8u121-b13. - Update PR1834/RH1022017 fix to reduce curves reported by SSL to apply against u121. -...

Virtuozzo Linux Errata and Security Advisory 2017:0180 Critical

Upstream security update. Follow RHSA-2017-0180 for details...

CVE-2016-0180

CVE-2016-0180 is a Windows kernel elevation-of-privilege vulnerability affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10 variants). The root cause is how the Windows kernel mishandles symbolic links, enabling a local attacker to gain privileges via a...

Microsoft Windows Privilege Elevation Vulnerability (3154846)

This host is missing an important security update according to Microsoft Bulletin MS16-060 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

KLA11914 Multiple vulnerability in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

Microsoft Windows Kernel CVE-2016-0180 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems Microsoft Windows 10 version 1511 for...

Oracle: Security Advisory (ELSA-2013-0180)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-0180)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0180

The IBM InfoSphere Information Server Connector Migration Tool (affecting 8.1–11.3) allows a user with a limited role to create/modify/delete certain jobs they should not access. The root cause is a rights/permission validation flaw within the Connector Migration Tool that bypasses intended restr...

CVE-2014-0180

CVE-2014-0180 affects Red Hat CloudForms 3.0 Management Engine (CFME) before version 5.2.4.2. The wait_for_task() function in app/controllers/application_controller.rb can, under certain conditions, enter an infinite loop, causing sustained CPU usage and a denial of service on the host running CF...

Oracle Linux 4 : krb5 (ELSA-2008-0180)

From Red Hat Security Advisory 2008:0180 : Updated krb5 packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Kerberos is a network authentication system whi...