CVE-2018-0431

CVE-2018-0431 affects Cisco Integrated Management Controller (IMC) Software. The web-based management interface allows an authenticated, remote attacker to inject and execute arbitrary system-level commands with root privileges due to insufficient input validation. Impact is high (remote, unauthe...

CVE-2018-0431 Cisco Integrated Management Controller Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC Software could allow an authenticated, remote attacker to inject and execute arbitrary commands with root privileges on an affected device. The vulnerability is due to insufficient validation of...

CVE-2017-0431

CVE-2017-0431 is described as an elevation-of-privilege vulnerability affecting Qualcomm closed-source components within Android kernel space. The details indicate a Qualcomm AMSS/Qualcomm component issue with Android IDs and a vendor-internal severity (listed as Critical for the Qualcomm-related...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2016-0431...

CVE-2016-0431

The CVE-2016-0431 entry concerns Oracle Solaris 11, specifically the Solaris Kernel Zones component. The connected CNVD/NVD entries describe an unspecified vulnerability in Solaris Kernel Zones that allows local attackers to cause a Denial of Service by exploiting this component; no root-cause, a...

Mageia: Security Advisory (MGASA-2015-0431)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2010-0627)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 201404-05

Gentoo Linux Local Security Checks GLSA 201404-05 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Amazon Linux: Security Advisory (ALAS-2013-156)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0431

CVE-2015-0431 applies to Oracle Transportation Management component of Oracle Supply Chain Products Suite (versions 6.1, 6.2, 6.3.x). The vulnerability is described as unspecified, allowing remote attackers to affect integrity via unknown vectors related to the UI Infrastructure. The NVD entry pr...

Design/Logic Flaw

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2014-0431...

CVE-2014-0431

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-5881...

CVE-2014-0431

CVE-2014-0431 is an unspecified vulnerability in the MySQL Server component of Oracle MySQL 5.6.14 and earlier. It allows remote authenticated users to affect availability via unknown vectors related to InnoDB (a different issue from CVE-2013-5881). The NVD entry lists a CVSS v2 base score of 3.5...

CVE-2014-0431

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-5881...

IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities

The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...

BlackHole Toolkit v2 JAVA Payload Stage Code Execution (CVE-2012-0507; CVE-2012-1723; CVE-2013-0422; CVE-2013-0431; CVE-2013-1493)

BlackHole is a web exploit kit that operates by delivering malicious payload to the victim's computer. Remote attackers can infect users with BlackHole by enticing them to visit a malicious web page. Successful infection will allow the attacker to download additional malware to the target...

Oracle Linux 5 : kvm (ELSA-2010-0627)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0627 advisory. - Resolves: bz619412 CVE-2010-2784 qemu: insufficient constraints checking in exec.c:subpageregister rhel-5.5.z -...

VulnCheck KEV: CVE-2013-0431

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle allows remote attackers to bypass the Java security sandbox...

openSUSE: Security Advisory for java-1_7_0-openjdk (openSUSE-SU-2013:0377-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Java MBeanInstantiator findClass and Introspector Sandbox Escape

Added: 03/04/2013 CVE: CVE-2013-0431 BID: 57726 OSVDB: 89613 Background Java is a programming language that compiles programs to bytecode, which is then executed inside a Java Virtual Machine. This is optimal for applications that must run on various hardware platforms, such as web applets. Probl...