SUSE: Security Advisory (SUSE-SU-2021:0652-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-0652

CVE-2020-0652 is a remote code execution vulnerability in Microsoft Office caused by improper handling of memory objects. The NVD entry lists a CVSSv3.1 vector of CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH), indicating a local exploit requiring user interaction an...

(RHSA-2019:0652) Moderate: Red Hat Ansible Tower 3.3.5

For a list of changes included in this release, please read the Ansible Tower Release Notes: https://docs.ansible.com/ansible-tower/latest/html/release-notes/index.html...

CVE-2019-0652

Technical details for CVE-2019-0652 are not publicly available in the provided documents. No confirmed affected products, root cause, impact or remediation are present; monitor for updates.

Remote code execution

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610, CVE-2019-064...

Remote code execution

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-061...

CVE-2019-0652

creationtimestamp| type| source ---|---|--- 2019-02-13 14:35:52+00:00| seen| MISP/5c642a56-2440-4af0-8bfd-6e4a0a021402...

KLA11422 Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A memory...

CVE-2018-0652

GROWI is affected: CVE-2018-0652 is a Stored XSS in the UserGroup Management section of admin page, impacting GROWI v3.1.11 and earlier. The underlying issue allows remote attackers with authentication to inject arbitrary scripts/HTML in the logged-in user’s browser. Documented impact includes ar...

CVE-2016-0652

Insight: CVE-2016-0652 is described as an unspecified local vulnerability in Oracle MySQL 5.7.10 and earlier affecting availability via DML. No concrete technical details or remediation are provided in the supplied documents; monitor for updates.

Oracle: Security Advisory (ELSA-2010-0652)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco TelePresence Conductor SDP Media Description Vulnerability

According to its self-reported version number, the Cisco TelePresence Conductor on the remote host contains an vulnerability related to the Session Description Protocol SDP packet handler function. A remote, unauthenticated attacker, using a crafted SDP packet to trigger a reload, can exploit thi...

CVE-2015-0652

CVE-2015-0652 affects Cisco TelePresence VCS, Cisco Expressway (before X8.2) and Cisco TelePresence Conductor (before XC2.4). The SDP packet handler vulnerability allows a remote, unauthenticated attacker to cause a denial of service (mishandled exception and device reload) via a crafted SDP medi...

CVE-2014-0652

Cisco Context Directory Agent (CDA) is affected by CVE-2014-0652 in the Mappings page. The vulnerability arises from insufficient validation of user-supplied input in the Mappings page, allowing an unauthenticated, remote attacker to craft a URL that injects arbitrary script/HTML (XSS) when a use...

GE Proficy Real-Time Information Portal Information Disclosure Vulnerabilities

Overview This advisory provides mitigation details for multiple vulnerabilities that impact the GE Intelligent Platforms Proficy Real-Time Information Portal. General Electric GE has addressed two vulnerabilities in the GE Intelligent Platforms Proficy Real-Time Information Portal. Exploitation o...

Oracle Linux 3 / 4 : seamonkey (ELSA-2009-0437)

From Red Hat Security Advisory 2009:0437 : Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

CVE-2013-0652

GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows remote attackers to obtain a username listing via an RMI call...

CVE-2013-0652

CVE-2013-0652 (GE Proficy Real-Time Information Portal) is an information disclosure vulnerability in GE’s Proficy Real-Time Information Portal. The issue arises because the portal exposes methods of an unspecified Java class via Java RMI, allowing an unauthenticated remote attacker to obtain a u...

Mac OS X 10.7.x < 10.7.5 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.5. The newer version contains multiple security-related fixes for the following components : - Apache - BIND - CoreText - Data Security - ImageIO - Installer - International Components for Unicode - Kernel - Mail - PHP ...

Mac OS X Multiple Vulnerabilities (2012-002)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-002. OpenVAS Vulnerability Test $Id: gbmacosxsu12-002.nasl 6521 2017-07-04 14:51:10Z cfischer $ Mac OS X Multiple Vulnerabilities 2012-002 Authors: Madhuri D Copyright: Copyright c...