159 matches found
CVE-2014-0593 sed command injection
The setversion script as shipped with obs-service-setversion is a source validator for the Open Build Service OBS. In versions prior to 0.5.3-1.1 this script did not properly sanitize the input provided by the user, allowing for code execution on the executing server...
CVE-2014-0593
The CVE concerns obs-service-set_version, a script used as a source validator in the Open Build Service (OBS). In versions prior to 0.5.3-1.1 the set_version script did not properly sanitize user input, allowing code execution on the executing server. Public references in the connected documents ...
CVE-2017-0593
An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to obtain access to custom permissions. This issue is rated as High because it is a general bypass for operating system protections that isolate application data from other applications...
CVE-2017-0593
CVE-2017-0593 is an elevation of privilege vulnerability in Android Framework APIs that could allow a local malicious application to obtain access to custom permissions. Affected products/versions identified in the connected documents include Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID:...
CVE-2016-0593
CVE-2016-0593 is rejected/not used; this candidate does not represent an active vulnerability entry.
CVE-2016-0593
...
CVE-2015-0593
The CVE-2015-0593 vulnerability affects Cisco IOS, specifically Zone-Based Firewall on 12.4(122)T and earlier. The issue arises from improper management of session-object structures, allowing remote attackers to trigger a denial of service resulting in a device reload via crafted network traffic ...
CVE-2015-0593
The Zone-Based Firewall implementation in Cisco IOS 12.4122T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of service device reload via crafted network traffic, aka Bug ID CSCul65003...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix two security issues and one bug are now available for Red Hat Enterprise Linux 6.3 Extended Update Support. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which gi...
Oracle Linux 5 : Critical: / firefox (ELSA-2008-0103)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0103 advisory. 1.5.0.12-9.0.1 - Added Oracle specific links into default bookmarks 1.5.0.12-9 - Update to latest snapshot of Mozilla 1.8.0 branch - Added a patch with...
Oracle Linux 3 / 4 : seamonkey (ELSA-2008-0104)
From Red Hat Security Advisory 2008:0104 : Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...
IBM SPSS SamplePower 3.0 < 3.0 FP 1 Multiple ActiveX Controls Arbitrary Code Execution
The remote install of IBM SPSS SamplePower has a vulnerable version of one or more ActiveX controls installed. 'Vsflex8l.ocx', 'c1sizer.ocx', 'vsflex7l .ocx', and 'olch2x32.ocx' ActiveX controls have unspecified arbitrary code execution vulnerabilities, which can be exploited by tricking a user...
CVE-2013-0593
IBM SPSS SamplePower 3.0 for Windows contains a vulnerability in the olch2x32 ActiveX control (olch2x32.ocx) that allows remote code execution when the control is invoked from Internet Explorer. The IBM Security Bulletin notes this affects SamplePower 3.0 with FP001; remediation is to apply the F...
Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64
Several flaws were found in the way SeaMonkey processed certain malformed web content. A webpage containing malicious content could cause SeaMonkey to crash, or potentially execute arbitrary code as the user running SeaMonkey. CVE-2008-0412, CVE-2008-0413, CVE-2008-0415, CVE-2008-0419 Several fla...
Apple Safari Webkit Multiple Vulnerabilities - March12 (Windows)
The host is installed with Apple Safari web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafariwebkitmultvulnmar12win.nasl 5888 2017-04-07 09:01:53Z teissa $ Apple Safari Webkit Multiple Vulnerabilities - March12 Windows Authors: Rachana Shetty Copyrigh...
Apple Safari Webkit Multiple Vulnerabilities (Mar 2012) - Windows
Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...
CVE-2012-0593
WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...
CVE-2012-0593
CVE-2012-0593 concerns WebKit used in Apple iOS prior to 5.1 and iTunes prior to 10.6. The issue allows a remote attacker to execute arbitrary code or cause a denial of service through a crafted web site, via memory corruption leading to application crash. The provided documents do not supply add...
CVE-2012-0593
WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-03-07-1 and...
Gentoo Security Advisory GLSA 201201-19 (acroread)
The remote host is missing updates announced in advisory GLSA 201201-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...