CVE-2017-0607

CVE-2017-0607 describes an elevation-of-privilege vulnerability in the Qualcomm sound driver on Android, allowing a local malicious application to execute arbitrary code in the kernel context. The description specifies Product: Android and Kernel-3.18, with Android ID A-35400551 and references QC...

Fedora Update for community-mysql FEDORA-2016-65

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : MySQL (openSUSE-2016-165)

This update to MySQL 5.6.28 fixes the following issues bsc962779 : - CVE-2015-7744: Lack of verification against faults associated with the Chinese Remainder Theorem CRT process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote...

Oracle MySQL Server 5.6 <= 5.6.27 / 5.7.9 Security Update (cpujan2016) - Windows

Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for MySQL (important)

This update to MySQL 5.6.28 fixes the following issues bsc962779: - CVE-2015-7744: Lack of verification against faults associated with the Chinese Remainder Theorem CRT process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote...

CVE-2016-0607

Mode C CVE-2016-0607 affects Oracle MySQL Server versions 5.6.27 and earlier and 5.7.9, with exploitation described as remote authenticated users affecting availability via replication-related vectors. The connected Nessus/NASL advisories indicate remediation by upgrading to a newer upstream vers...

MySQL 5.6.x < 5.6.28 Multiple Vulnerabilities

The version of MySQL running on the remote host is 5.6.x prior to 5.6.28. It is, therefore, affected by the following vulnerabilities : - Multiple unspecified flaws exists in the Server : DML subcomponent that allows an authenticated, remote attacker to cause a denial of service. CVE-2016-0503,...

MySQL 5.7.x < 5.7.10 Multiple DoS

The version of MySQL running on the remote host is 5.7.x prior to 5.7.10. It is, therefore, potentially affected by the following vulnerabilities : - Multiple unspecified flaws exists in the Server : DML subcomponent that allows an authenticated, remote attacker to cause a denial of service...

Oracle: Security Advisory (ELSA-2010-0607)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED10 Security Update : Acrobat Reader (SUSE-SU-2013:0044-1)

Acrobat Reader was updated to 9.5.3 to fix various bugs and security issues. More information can be found at http://www.adobe.com/support/security/bulletins/apsb13-02.html The resolved security issues are CVE-2012-1530 , CVE-2013-0601 , CVE-2013-0602 , CVE-2013-0603 , CVE-2013-0604 , CVE-2013-06...

CVE-2015-0607

The CVE-2015-0607 issue affects Cisco IOS Authentication Proxy by mishandling unsupported AAA return codes from RADIUS/TACACS+ servers, enabling a remote attacker to bypass authentication (e.g., with a blank password). The root cause is improper processing of invalid AAA codes by the Authenticati...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-0607. Reason: This candidate is a duplicate of CVE-2015-0607. The wrong ID was used. Notes: All CVE users should reference CVE-2015-0607 instead of this candidate. All references and descriptions in this candidate have been...

CVE-2014-2188

CVE-2014-2188 is rejected and not used.

CVE-2014-0607

Attachmate Verastream Process Designer (VPD) contains a remote code execution vulnerability in the DeploymentService Axis web service. The flaw is a directory traversal/file upload issue that allows an unauthenticated attacker to upload a file to the web server’s root directory and execute it wit...

openSUSE Security Update : acroread (openSUSE-SU-2013:0363-1)

Update to 9.5.3 bnc797529 to fix: CVE-2012-1530, CVE-2013-0601, CVE-2013-0602, CVE-2013-0603, CVE-2013-0604, CVE-2013-0605, CVE-2013-0606, CVE-2013-0607, CVE-2013-0608, CVE-2013-0609, CVE-2013-0610, CVE-2013-0611, CVE-2013-0612, CVE-2013-0613, CVE-2013-0614, CVE-2013-0615, CVE-2013-0616,...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0109-1)

The Adobe Flash Player was updated to the 10.2.152.26 release, fixing lots of bugs and security issues. The update is rated critical by Adobe, although details have not been published. CVEs addressed: CVE-2011-0558, CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572,...

Oracle Linux 5 : freetype (ELSA-2010-0607)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0607 advisory. - Add freetype-2.2.1-CVE-2010-1797.patch Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessu...

SuSE 11.2 Security Update : Acrobat Reader (SAT Patch Number 7230)

Acrobat Reader was updated to 9.5.3 to fix various bugs and security issues. More information can be found at http://www.adobe.com/support/security/bulletins/apsb13-02.html The resolved security issues are CVE-2012-1530 / CVE-2013-0601 / CVE-2013-0602 / CVE-2013-0603 / CVE-2013-0604 / CVE-2013-06...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 8431)

Acrobat Reader was updated to 9.5.3 to fix various bugs and security issues. More information can be found at http://www.adobe.com/support/security/bulletins/apsb13-02.html The resolved security issues are CVE-2012-1530 / CVE-2013-0601 / CVE-2013-0602 / CVE-2013-0603 / CVE-2013-0604 / CVE-2013-06...

Code injection

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error," a different vulnerability than CVE-2013-0607, CVE-2013-0608, CVE-2013-0611, and CVE-2013-0614...