SUSE: Security Advisory (SUSE-SU-2013:0456-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2013:0440-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2013:0456-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:0434-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-0434

In Pixel's use of the Catpipe library, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2020-0434

CVE-2020-0434 relates to Pixel’s use of the Catpipe library, where a use-after-free leads to memory corruption in the Android kernel and enables local privilege escalation without user interaction. The impact is Local Privilege Escalation with high severity (per CVSS), affecting Pixel devices via...

CVE-2018-0434 Cisco SD-WAN Solution Certificate Validation Vulnerability

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

CVE-2018-0434

CVE-2018-0434 describes a certificate validation weakness in Cisco SD-WAN Solution’s Zero Touch Provisioning. The flaw stems from insufficient validation of certificates, allowing an unauthenticated, remote attacker who can present a crafted certificate to gain unauthorized access and perform man...

CVE-2017-0434

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process. Product: Android...

CVE-2017-0434

CVE-2017-0434 affects the Synaptics touchscreen driver in the Android kernel (Kernel-3.18). It is an elevation of privilege vulnerability that could allow a local malicious application to execute arbitrary code within the context of the touchscreen chipset after compromising a privileged process....

CVE-2016-0434

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0436, CVE-2016-0437, and CVE-2016-0438...

CVE-2016-0434

CVE-2016-0434 concerns Oracle Retail Applications’ Point-of-Service component (Oracle Retail POS) across versions 13.4, 14.0, and 14.1. The connected CNVD/NVD entries describe an unspecified vulnerability in the Oracle Retail Point-of-Service Mobile POS component that could be exploited by a loca...

CVE-2016-0434

Unspecified vulnerability in the Oracle Retail Point-of-Service component in Oracle Retail Applications 13.4, 14.0, and 14.1 allows local users to affect confidentiality via vectors related to Mobile POS, a different vulnerability than CVE-2016-0436, CVE-2016-0437, and CVE-2016-0438...

CVE-2015-0434

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to affect confidentiality via vectors related to Integration with OAM...

CVE-2015-0434

CVE-2015-0434 describes an unspecified vulnerability in Oracle Access Manager within Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 that can allow remote attackers to affect confidentiality through integration with OAM. The exposure is network-based with medium attack complex...

openSUSE Security Update : java-1_6_0-openjdk (openSUSE-SU-2013:0308-1)

OpenJDK java-160-openjdk was updated to 1.12.2 to fix bugs and security issues bnc801972 - Security fixes on top of 1.12.0 - S6563318, CVE-2013-0424: RMI data sanitization - S6664509, CVE-2013-0425: Add logging context - S6664528, CVE-2013-0426: Find log level matching its name or value given at...

CVE-2014-0434

Technical details about CVE-2014-0434 are not publicly available in the provided documents; no affected products, impacts, or fixes are specified here. Monitor for updates.

CVE-2012-0434

The CVE concerns the Crowbar server used in SUSE Cloud 1.0, where the production.log file has weak permissions. The available connected documents confirm the affected component and the root cause (inappropriate permissions on production.log). The impact is not specified in the provided materials,...

IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities

The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...

Oracle Linux 5 : httpd (ELSA-2010-0168)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0168 advisory. 2.2.3-31.0.1.el54.4 - Replace index.html with Oracle's index page oracleindex.html - Update vstring and distro in specfile 2.2.3-31.4 - require and BR ...