Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt41

3:11-alt41 built Feb. 6, 2015 Sergey V Turchin in task 139918 Feb. 6, 2015 Sergey V Turchin - new version - security fixes: CVE-2015-0313, CVE-2015-0314, CVE-2015-0315, CVE-2015-0316, CVE-2015-0317, CVE-2015-0318, CVE-2015-0319, CVE-2015-0320, CVE-2015-0321, CVE-2015-0322, CVE-2015-0323,...

Google Chrome < 40.0.2214.111 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 40.0.2214.111. It is, therefore, affected by multiple vulnerabilities as referenced in the 201502stable-channel-update advisory. - The OriginCanAccessServiceWorkers function in...

Flash Player For Mac <= 16.0.0.296 Unspecified Code Execution (APSA15-02 / APSB15-04)

According to its version, the Adobe Flash Player installed on the remote Mac OS X host is equal or prior to 16.0.0.296. It is, therefore, affected by the following vulnerabilities : - Several use-after-free errors exist that allow arbitrary code execution. CVE-2015-0313, CVE-2015-0315,...

Flash Player <= 16.0.0.296 Unspecified Code Execution (APSA15-02 / APSB15-04)

According to its version, the Adobe Flash Player installed on the remote Windows host is equal or prior to 16.0.0.296. It is, therefore, affected by the following vulnerabilities : - Several use-after-free errors exist that allow arbitrary code execution. CVE-2015-0313, CVE-2015-0315,...

ZTE ZXV10 W300 Wireless Router Hard-coded Password

Nessus was able to login to the remote device using a known hard-coded password prepended with a portion of the device's MAC address obtained from an SNMP request for the admin account. Attackers can exploit this vulnerability to gain full control of the device. TRUSTED...

ZTE ZXV10 W300 Router信任管理漏洞

CVE ID：CVE-2014-0329 ZTE ZXV10 W300 Router是中国中兴通讯（ZTE）公司的一款无线路由器产品。 ZTE ZXV10 W300路由器2.1.0版本上的TELNET服务中存在安全漏洞，该漏洞源于程序安装使用默认的硬编码凭证，将admin帐户密码‘XXXXairocon’中的前四位设置为MAC地址后四位。远程攻击者可通过已知的密码利用该漏洞获取管理访问权限。 0 ZTE ZXV10 W300 Router 厂商补丁： ZTE ----- 目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：...

ZTE ZXV10 W300 Router - Hard-Coded Credentials

ZTE ZXV10 W300 Router - Hard-Coded Credentials Exploit Title: ZTE ZXV10 W300 router contains hardcoded credentials Date: 03 Feb 2014 Exploit Author: Cesar Neira Vendor Homepage: http://wwwen.zte.com.cn/ Version: ZTE ZXV10 W300 v2.1 CVE : CVE-2014-0329 Dork Shodan: Basic realm="index.htm"...

ZTE ZXV10 W300 Hardcoded Credentials

Exploit Title: ZTE ZXV10 W300 router contains hardcoded credentials Date: 03 Feb 2014 Exploit Author: Cesar Neira Vendor Homepage: http://wwwen.zte.com.cn/ Version: ZTE ZXV10 W300 v2.1 CVE : CVE-2014-0329 Dork Shodan: Basic realm="index.htm" References:...

CVE-2014-0329

The CVE-2014-0329 issue affects ZTE ZXV10 W300 router (v2.1.0) where the TELNET service exposes a hard-coded admin password ending in “airocon,” with the first four characters derived from the device MAC. Remote attackers can gain administrator access using this credential, as documented in multi...

ZTE ZXV10 W300 router contains hardcoded credentials

Overview ZTE ZXV10 W300 router version 2.1.0, and possibly earlier versions, contains hardcoded credentials. CWE-798 Description ZTE ZXV10 W300 router contains hardcoded credentials that are useable for the telnet service on the device. The username is "admin" and the password is "XXXXairocon"...

Cisco Digital Media Manager < 5.3 Privilege Escalation

The remote device is running a version of Cisco Digital Media Manager prior to 5.3. As such, it is affected by a privilege escalation vulnerability. A remote, authenticated attacker could leverage this to execute arbitrary code on the device. TRUSTED...

Oracle Linux 6 : kernel (ELSA-2011-0329)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0329 advisory. 2.6.32-71.18.2.el6 - fs sunrpc: Correct a misapplied patch J. Bruce Fields 678094 678146 Tenable has extracted the preceding description block directly from the...

Moderate: Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1.2 update

Red Hat OpenShift Enterprise 1.1.2, which fixes several security issues, is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for eac...

CVE-2012-0329

CVE-2012-0329 affects Cisco Digital Media Manager (DMM) versions prior to or including 5.2.3. The vulnerability arises from improper validation of unreferenced URLs, allowing a remote, authenticated attacker to access administrative resources and execute arbitrary code. Impact is privilege escala...

CVE-2011-0329

The CVE-2011-0329 entry concerns the Dell DellSystemLite.Scanner ActiveX control (DellSystemLite.ocx 1.0.0.0). Affected component is GetData(), where improper input validation allows directory traversal via the fileID parameter to read arbitrary files. The DellSystemLite.Scanner is reported to be...

Fedora Update for maniadrive-data FEDORA-2011-0329

Check for the Version of maniadrive-data OpenVAS Vulnerability Test Fedora Update for maniadrive-data FEDORA-2011-0329 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Fedora Update for php FEDORA-2011-0329

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for curl CESA-2010:0329 centos4 i386

Check for the Version of curl OpenVAS Vulnerability Test CentOS Update for curl CESA-2010:0329 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CVE-2010-0329

The CVE-2010-0329 entry describes a SQL injection vulnerability in the TYPO3 powermail extension versions 1.5.1 and earlier. The issue is exploitable via unspecified vectors related to the SQL selection field and typoscript, allowing remote attackers to execute arbitrary SQL commands. No remediat...

CentOS Security Advisory CESA-2009:0329 (freetype)

The remote host is missing updates to freetype announced in advisory CESA-2009:0329. CESA-2009:0329 64061 6 $Id: ovcesa20090329.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0329 freetype Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...