KB4532693: Windows 10 Version 1903 and Windows 10 Version 1909 February 2020 Security Update

The remote Windows host is missing security update 4532693. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who successfully exploited this...

CVE-2019-0677

CVE-2019-0677 entry is rejected and not used; it does not represent an active vulnerability.

CVE-2018-0677

CVE-2018-0677 affects Panasonic BN-SDWBP3 firmware versions 1.0.9 and earlier. The JVN entry confirms an OS Command Injection vulnerability exploitable by a user on the same LAN who can access the product with administrative privileges; the exposure is via unspecified vectors, with impact limited...

CVE-2017-0677

CVE-2017-0677 is a remote code execution vulnerability in the Android media framework affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The CVE is listed with Android as the affected product and Android ID A-36035074. Public disclosures in connected sources confirm the issue as a media framewo...

CVE-2017-0677

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36035074...

Cisco NX-OS Software Label Distribution Protocol Message Vulnerability (Cisco-SA-20140123-CVE-2014-0677)

A vulnerability in the Label Distribution Protocol LDP message processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to stop accepting valid LDP sessions during a 60-second period. Copyright C 2016 Greenbone Networks GmbH Some text...

CVE-2016-0677

CVE-2016-0677 affects Oracle Database Server 12.1.0.1 and 12.1.0.2 in the RDBMS Security component. The connected documents corroborate an unspecified vulnerability that can impact availability (initial description) and further indicate related fixes in the Oracle April 2016 CPU advisory (CPUAPR2...

CVE-2016-0677

Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote attackers to affect availability via unknown vectors...

Oracle: Security Advisory (ELSA-2012-0677)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-0677)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco ASA VPN XML Parser DoS Vulnerability (cisco-sa-20150408-asa)

Cisco ASA is prone to a DoS vulnerability in the VPN XML Parser. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20150408-asa)

The remote Cisco Adaptive Security Appliance ASA is missing a vendor-supplied security patch and is therefore affected by the following vulnerabilities : - A flaw exists in the failover ipsec feature due to not properly handling failover communication messages. An unauthenticated attacker, sendin...

CVE-2015-0677

The CVE-2015-0677 issue affects Cisco ASA Software: the XML parser in ASA web/VPN components can be triggered by a crafted XML document to cause a denial of service (VPN outage or device reload). Affected versions include ASA 8.4 up to 8.4(7.28), 8.6 up to 8.6(1.17), 9.0 up to 9.0(4.33), 9.1 up t...

CVE-2015-0677

The XML parser in Cisco Adaptive Security Appliance ASA Software 8.4 before 8.47.28, 8.6 before 8.61.17, 9.0 before 9.04.33, 9.1 before 9.16, 9.2 before 9.23.4, and 9.3 before 9.33, when Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN is used, allows remote attackers to cause a...

Fedora Update for elfutils FEDORA-2015-0677

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple iTunes 10.6.1.7 M3U Playlist File Walking Heap Buffer Overflow

No description provided by source. !/usr/bin/perl Apple iTunes 10.6.1.7 M3U Playlist File Walking Heap Buffer Overflow Vendor: Apple Inc. Product web page: http://www.apple.com Affected version: 10.6.1.7 and 10.6.0.40 Summary: iTunes is a free application for your Mac or PC. It lets you organize...

Cisco NX-OS Software Label Distribution Protocol Message Vulnerability (Cisco-SA-20140123-CVE-2014-0677)

A vulnerability in the Label Distribution Protocol LDP message processing of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an affected device to stop accepting valid LDP sessions during a 60-second period. Copyright C 2014 Greenbone Networks GmbH Some text...

CVE-2014-0677

CVE-2014-0677 affects Cisco NX-OS LDP functionality. The vulnerability arises from how the Label Distribution Protocol (LDP) handles certain malformed Hello messages in LDP discovery traffic, allowing an unauthenticated remote attacker to cause a denial of service by triggering a temporary LDP se...

Oracle Linux 5 : postgresql (ELSA-2012-0677)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0677 advisory. - Back-port upstream fixes for CVE-2012-0866 and CVE-2012-0868 Resolves: 812070 Tenable has extracted the preceding description block directly from the...

CVE-2013-0677

The CVE-2013-0677 issue affects Siemens WinCC (pre-7.2) used in SIMATIC PCS7 pre-8.0 SP1 and related products. A crafted project file can allow remote attackers to access sensitive information or cause a DoS via the WinCC web server component. The root cause is improper handling of crafted projec...