Solaris 10 (x86) : 147714-01

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Library/libc. Supported versions that are affected are 9 and 10. Difficult to exploit vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability can result in...

Solaris 10 (sparc) : 147713-01

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Library/libc. Supported versions that are affected are 9 and 10. Difficult to exploit vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability can result in...

CVE-2017-0419

The CVE-2017-0419 entry concerns Android Audioserver. A local elevation-of-privilege flaw could allow a malicious local app to execute arbitrary code within the context of a privileged process. Affected products include Android versions 4.4.4 through 7.1.1. The issue’s root cause is described as ...

U.S. Dept Of Defense: Out-of-date Version (Apache)

URL https://████████/ Identified Version 2.2.15 contains 4 important and 10 other vulnerabilities Latest Version 2.2.31 Vulnerability Database Result is based on 27.10.2016 vulnerability database content. Vulnerability Details Link identified you are using an out-of-date version of Apache. Impact...

CVE-2016-0419

Technical details are not publicly available in the provided documents. Monitor for updates.

Oracle: Security Advisory (ELSA-2011-0507)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0419

CVE-2015-0419 affects Oracle Siebel CRM 8.1.1 and 8.2.2 in the Siebel UI Framework Portal Framework. The vulnerability allows unauthorized read access via HTTP and is described in the January 2015 CPU as a difficult-to-exploit issue that requires authentication. No further technical details (root...

SOL15920 - Apache vulnerability CVE-2011-0419

Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the table does not list any version in the column, then no upgrade candidate currently exists. BIG-IP and...

openSUSE Security Update : apache2 (openSUSE-SU-2011:0859-1)

This update fixes : - CVE-2011-0419 and CVE-2011-1928: unconstrained recursion when processing patterns - CVE-2010-1623: a remote DoS memory leak in APR's reqtimeoutfilter function %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE Security Update : apache2 (openSUSE-SU-2011:0859-1)

This update fixes : - CVE-2011-0419 and CVE-2011-1928: unconstrained recursion when processing patterns - CVE-2010-1623: a remote DoS memory leak in APR's reqtimeoutfilter function %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

GLSA-201405-24 : Apache Portable Runtime, APR Utility Library: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201405-24 Apache Portable Runtime, APR Utility Library: Denial of Service Multiple vulnerabilities have been discovered in Apache Portable Runtime and APR Utility Library. Please review the CVE identifiers referenced below for...

CVE-2014-0419

CVE-2014-0419 concerns the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization SGD, affected in versions before 4.63 (with December 2013 PSU), 4.71, and 5.0/5.10 (with December 2013 PSU). The vulnerability is described as unspecified, enabling remote attackers to affect confiden...

IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities

The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...

Oracle Linux 5 / 6 : apr (ELSA-2011-0507)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0507 advisory. 1.3.9-3.1 - add fix for CVE-2011-0419 703520 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...

Oracle Linux 3 / 4 : seamonkey (ELSA-2008-0104)

From Red Hat Security Advisory 2008:0104 : Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

Oracle Linux 5 : Critical: / firefox (ELSA-2008-0103)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0103 advisory. 1.5.0.12-9.0.1 - Added Oracle specific links into default bookmarks 1.5.0.12-9 - Update to latest snapshot of Mozilla 1.8.0 branch - Added a patch with...

Oracle Linux 5 / 6 : apr (ELSA-2011-0844)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0844 advisory. 1.3.9-3.2 - add fix for aprfnmatch regression CVE-2011-1928, 706352 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Java SE Multiple Vulnerabilities (February 2013 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 7 Update 13 or 6 Update 39, or is earlier than or equal to 5 Update 38 or 1.4.2 Update 40. It is, therefore, potentially affected by security issues in the following components : - 2D - AW...

Ubuntu: Security Advisory (USN-1724-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell Groupwise Agents HTTP Directory Traversal

This module exploits a directory traversal vulnerability in Novell Groupwise. The vulnerability exists in the web interface of both the Post Office and the MTA agents. This module has been tested successfully on Novell Groupwise 8.02 HP2 over Windows 2003 SP2. This module requires Metasploit:...