138 matches found
Google Chrome < 40.0.2214.111 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 40.0.2214.111. It is, therefore, affected by multiple vulnerabilities as referenced in the 201502stable-channel-update advisory. - The OriginCanAccessServiceWorkers function in...
Flash Player <= 16.0.0.296 Unspecified Code Execution (APSA15-02 / APSB15-04)
According to its version, the Adobe Flash Player installed on the remote Windows host is equal or prior to 16.0.0.296. It is, therefore, affected by the following vulnerabilities : - Several use-after-free errors exist that allow arbitrary code execution. CVE-2015-0313, CVE-2015-0315,...
Flash Player For Mac <= 16.0.0.296 Unspecified Code Execution (APSA15-02 / APSB15-04)
According to its version, the Adobe Flash Player installed on the remote Mac OS X host is equal or prior to 16.0.0.296. It is, therefore, affected by the following vulnerabilities : - Several use-after-free errors exist that allow arbitrary code execution. CVE-2015-0313, CVE-2015-0315,...
Microsoft Windows Kernel-Mode Drivers Privilege Escalation Vulnerabilities (2984615)
This host is missing an important security update according to Microsoft Bulletin MS14-045. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2014-0318
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly control access to thread-owned objects, which...
CVE-2014-0318
CVE-2014-0318 affects Windows kernel-mode driver code (win32k.sys) and enables local privilege escalation by abusing thread-owned object access. The vulnerability impacts multiple Windows client/server platforms listed in the initial description (e.g., Windows Server 2003 SP2, Vista SP2, Server 2...
Microsoft Windows Kernel 'Win32k.sys' CVE-2014-0318 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges and gain access to kernel memory. Technologies Affected Avaya Aura Conferencing 6.0 SP1 Standard Avaya Aura Conferencing...
MS14-045: Vulnerabilities in Kernel-Mode Drivers Could Allow Elevation of Privilege (2984615)
The remote Windows host is affected by multiple vulnerabilities : - A privilege escalation vulnerability exists in the Windows kernel-mode driver due to improper usage of window handle thread-owned objects. A local attacker could execute a specially crafted application in kernel mode to take...
Oracle Linux 5 / 6 : libtiff (ELSA-2011-0392)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0392 advisory. - Fix incorrect fix for CVE-2011-0192 Resolves: 688829 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...
CentOS Update for libtiff CESA-2011:0318 centos5 x86_64
Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2011:0318 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
CVE-2012-0318
Movable Type has XSS vulnerabilities identified as CVE-2012-0318 affecting MT <4.38, MT 5.0.x <5.07, and MT 5.1.x
CVE-2011-0318
Dirapi.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-0317, CVE-2011-0319, CVE-2011-0320, CVE-2011-0335, CVE-2011-2119, and CVE-2011-2122...
CVE-2011-0318
Adobe Shockwave Player (Mac OS X)
libtiff security update
CentOS Errata and Security Advisory CESA-2011:0392 Updated libtiff packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability...
CentOS Update for libtiff CESA-2011:0318 centos4 i386
Check for the Version of libtiff OpenVAS Vulnerability Test CentOS Update for libtiff CESA-2011:0318 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
RHEL 4 / 5 / 6 : libtiff (RHSA-2011:0318)
The remote Redhat Enterprise Linux 4 / 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0318 advisory. - libtiff: buffer overflow in Fax4Decode CVE-2011-0192 Note that Nessus has not tested for this issue but has instead relied only on the...
CVE-2010-0318
The CVE-2010-0318 issue affects FreeBSD 7.1, 7.2, and 8.0 where the ZFS Intent Log (ZIL) replay path, during setattr, creates new files with permissions 7777 instead of the original rights. This can allow local users to read or modify files after a crash or power failure in opportunistic circumst...
Fedora Core 12 FEDORA-2009-12950 (gtk2)
The remote host is missing an update to gtk2 announced via advisory FEDORA-2009-12950. OpenVAS Vulnerability Test $Id: fcore200912950.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12950 gtk2 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Sof...
Fedora Core 12 FEDORA-2009-12950 (gtk2)
The remote host is missing an update to gtk2 announced via advisory FEDORA-2009-12950. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Mandriva Linux Security Advisory : gnumeric (MDVSA-2009:043)
Python has a variable called sys.path that contains all paths where Python loads modules by using import scripting procedure. A wrong handling of that variable enables local attackers to execute arbitrary code via Python scripting in the current Gnumeric working directory CVE-2009-0318. This upda...