CVE-2018-0375

CVE-2018-0375 affects Cisco Policy Suite Cluster Manager prior to 18.2.0. Root cause: undocumented, static credentials allow an unauthenticated, remote attacker to log in as root and execute arbitrary commands. Impact: full root access over the affected system via network; high confidentiality, i...

Security Bulletin: RCE vulnerability in JMS Client in IBM MessageSight (CVE-2016-0375)

Summary RCE vulnerability in JMS Client in IBM MessageSight Vulnerability Details CVEID: CVE-2016-0375 DESCRIPTION: IBM MessageSight contains an unspecified vulnerability that could allow a remote authenticated attacker to execute arbitrary commands with administrator privileges. CVSS Base Score:...

Fedora 27 : tor (2017-b2c714515b)

update to upstream release 0.3.1.7 ---- update to upstream release 0.2.9.12 SECURITY 1494860 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

openSUSE Security Update : tor (openSUSE-2017-690)

This update to tor 0.2.9.11 fixes the following vulnerabilities : - CVE-2017-0375: remotely triggerable assertion failure when a hidden service handles a malformed BEGIN cell bsc1043455 - CVE-2017-0376: remotely triggerable assertion failure caused by receiving a BEGINDIR cell on a hidden service...

CVE-2017-0375

The hidden-service feature in Tor before 0.3.0.8 allows a denial of service assertion failure and daemon exit in the relaysendendcellfromedge function via a malformed BEGIN cell...

CVE-2017-0375

The CVE-2017-0375 issue affects Tor’s hidden-service feature prior to 0.3.0.8, where a malformed BEGIN cell can trigger an assertion failure in relay_send_end_cell_from_edge_, causing a daemon crash (DoS). Affected software is Tor, with the root cause in the hidden service handling code. Remediat...

Virtuozzo Linux Errata and Bugfix Advisory 2017:0375

Upstream security update. Follow RHBA-2017-0375 for details...

CVE-2016-0375

JMS Client in IBM MessageSight 1.1.x through 1.1.0.1, 1.2.x through 1.2.0.3, and 2.0.x through 2.0.0.0 allows remote authenticated users to obtain administrator privileges for executing arbitrary commands via unspecified vectors...

CVE-2016-0375

IBM MessageSight’s JMS Client vulnerability (CVE-2016-0375) affects V1.1 (1.1.0.1 and earlier up to 1.1.0.1), V1.2 (up to 1.2.0.3), and V2.0 (up to 2.0.0.0). A remote authenticated attacker could execute arbitrary commands with administrator privileges via unspecified vectors. CVSSv3 base score 8...

Oracle: Security Advisory (ELSA-2013-0219)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Solaris Critical Patch Update : jan2015_SRU11_1_16_5_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Network. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful...

CVE-2015-0375

CVE-2015-0375 affects Oracle Solaris 10 and 11, specifically the Solaris Network component. The connected Nessus/NVD entries describe an easily exploitable, unauthenticated network vulnerability in TCP/IP that can impact confidentiality and, in some listings, may enable unauthorized read access t...

CVE-2015-0375

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect confidentiality via unknown vectors related to Network...

Low: Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.4, 5.5, and 5.6. The Red Hat Security Response Team has rated this update as having Low security impact. Common Vulnerability Scoring System CVSS base scores, which give...

IBM Domino 9.x < 9.0.1 Fix Pack 1 Multiple Vulnerabilities (uncredentialed check)

According to its version, the IBM Domino formerly IBM Lotus Domino on the remote host is 9.x prior to 9.0.1 Fix Pack 1 FP1. It is, therefore, affected by the following vulnerabilities : - A stack overflow issue exists due to the insecure '-z execstack' flag being used during compilation, which...

RHEL 5 / 6 : java-1.7.0-oracle (RHSA-2014:0030)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0030 advisory. Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update fixes...

Critical: Red Hat Security Advisory: java-1.7.0-oracle security update

Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

KLA10511 Multiple vulnerabilities in Oracle products

An unspecified vulnerabilities were found in Oracle products. By exploiting this vulnerability malicious users can affect integrity, confidentiality and availability. This vulnerability can be exploited remotely via an unknown vectors related to 2D, Beans, CORBA, Deployment, Hotspot, Install, JAA...

Oracle Linux 4 : seamonkey (ELSA-2011-0375)

From Red Hat Security Advisory 2011:0375 : Updated SeaMonkey packages that fix one security issue are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. SeaMonkey is an open source web browser, email and...

MariaDB 5.1.0 < 5.1.67 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.1.67. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.1.67 advisory. - Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users t...