CVE-2016-0671

CVE-2016-0671 affects Oracle Fusion Middleware 12.1.2.0, specifically the Oracle HTTP Server component and its OSSL Module subcomponent. The connected CNVD entry describes a data‑read vulnerability in the OSSL Module of Oracle HTTP Server, enabling remote attackers to compromise data confidential...

SUSE: Security Advisory for flash-player (SUSE-SU-2014:0671-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : firefox-35.0-2.fc20 (2015-0671)

New upstream version. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

CVE-2014-0671

Cisco MediaSense contains an open redirect vulnerability exploitable by an unauthenticated, remote attacker due to insufficient input validation in a specific URL parameter. An attacker can craft a link directing users to a malicious site, enabling phishing attempts. The Cisco advisory notes no s...

Moderate: Red Hat Security Advisory: openstack-packstack security and bug fix update

An updated openstack-packstack package that fixes one security issue and several bugs is now available for Red Hat OpenStack Folsom. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

CVE-2013-0671

CVE-2013-0671 affects Siemens WinCC (TIA Portal) 11. The vulnerability is a Directory Traversal vulnerability in the HMI Web server, exploitable by manipulating the URL to read panel server-side source code and user-defined scripts. It requires authenticated access; exploitation is not remote wit...

Apple QuickTime PICT File Processing Memory Corruption (CVE-2012-0671)

A memory corruption vulnerability has been reported in Apple QuickTime...

Mac OS X v10.6.8 Multiple Vulnerabilities (2012-004)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2012-004. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mac OS X Multiple Vulnerabilities (Security Update 2012-004) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-004 applied. This update contains multiple security-related fixes for the following components : - Apache - Data Security - DirectoryService - ImageIO - International Components for Unicode - Mail - PHP ...

Mac OS X 10.7.x < 10.7.5 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.7.x that is prior to 10.7.5. The newer version contains multiple security-related fixes for the following components : - Apache - BIND - CoreText - Data Security - ImageIO - Installer - International Components for Unicode - Kernel - Mail - PHP ...

Apple Quicktime Memory Corruption &#40;CVE-2012-0671&#41;

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Qualys Vulnerability & Malware Research Labs VMRL http://www.qualys.com http://www.dissect.pe Memory corruption when Apple Quicktime parsers .pct file CVE-2012-0671 INTRODUCTION Apple Quicktime does not properly parse .pct media files, which causes a...

QuickTime < 7.7.2 Multiple Vulnerabilities

Binary data 6489.prm...

Apple QuickTime 7.7.2之前版本多个远程任意代码执行漏洞

BUGTRAQ ID: 53547 CVE ID: CVE-2012-0663,CVE-2012-0664,CVE-2012-0665,CVE-2012-0666,CVE-2012-0667,CVE-2012-0668,CVE-2012-0669,CVE-2012-0670,CVE-2012-0671,CVE-2012-0265 OS X Lion Server 内含一组应用软件，可将任意一台Mac 变成功能强大的服务器。Mac OS是一套运行于苹果的Macintosh系列电脑上的操作系统。 Windows 7、Vista、XP上的Apple QuickTime...

CVE-2012-0671

CVE-2012-0671 : Apple QuickTime before 7.7.2 is affected. Memory corruption/remote code execution or denial of service can occur when processing a crafted .pict file. This is tied to QuickTime/PICT handling and is documented in multiple sources, including the vulnerability entry for CVE-2012-0671...

Gentoo Security Advisory GLSA 201111-07 (TinTin++)

The remote host is missing updates announced in advisory GLSA 201111-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201111-07 (TinTin++)

The remote host is missing updates announced in advisory GLSA 201111-07. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2011-0671

The CVE-2011-0671 issue affects Windows kernel-mode driver win32k.sys and is caused by a use-after-free from incorrect driver object management. Affects Windows XP SP2-SP3, Server 2003 SP2, Vista SP1-SP2, Server 2008 Gold/SP2/R2 and R2 SP1, and Windows 7 Gold/SP1. Local privilege escalation is po...

Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2506223)

This host is missing a critical security update according to Microsoft Bulletin MS11-034. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora Update for systemtap FEDORA-2010-0671

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-0671

Summary of CVE-2010-0671 (normal mode): The vulnerability affects the KR MEDIA Pogodny CMS, specifically in the index.php handling of the niusy action. The root cause is improper handling of the id parameter, leading to an SQL injection that allows remote attackers to execute arbitrary SQL comman...