CVE-2016-0686

CVE-2016-0686 affects Oracle Java SE 6u113, 7u99, 8u77 and Java SE Embedded 8u77, with a Serialization‑related weakness that enables remote attackers to affect confidentiality, integrity and availability. The connected sources affirm a deserialization/serialization flaw in OpenJDK components (Ser...

RedHat Update for java-1.8.0-openjdk RHSA-2016:0651-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for java-1.8.0-openjdk RHSA-2016:0650-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : java-1.8.0-openjdk (ELSA-2016-0651)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0651 advisory. 1:1.8.0.91-1.b03 - Update to u91b14. - Resolves: rhbz1325420 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Java SE Multiple Vulnerabilities (April 2016 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 8 Update 91, 7 Update 101, or 6 Update 115. It is, therefore, affected by security vulnerabilities in the following subcomponents : - 2D - Deployment - Hotspot - JAXP - JCE - JMX - Security -...

Oracle Java SE Multiple Vulnerabilities (April 2016 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 8 Update 91, 7 Update 101, or 6 Update 115. It is, therefore, affected by security vulnerabilities in the following subcomponents : - 2D - Deployment - Hotspot - JAXP - JCE - JMX - Security -...

KLA10793 Multiple vulnerabilities in Oracle Java SE

An unspecified vulnerabilities were found in Oracle Java SE. By exploiting these vulnerabilities malicious users can cause denial of service and loss of integrity or obtain sensitive vulnerability. These vulnerabilities can be exploited remotely via a multiple vectors related to 2D, Hotspot,...

Oracle: Security Advisory (ELSA-2014-0686)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0686

CVE-2015-0686 affects Cisco Nexus 9000 Series running Cisco NX-OS 6.1(2)I2(3). The SNMP subsystem vulnerability triggered when the High Availability policy is set to Reset allows remote authenticated users to cause a denial of service (device reload). The issue is specific to Nexus 9000 platforms...

Oracle Linux 7 : tomcat (ELSA-2014-0686)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0686 advisory. - Related: CVE-2013-4286 - Related: CVE-2013-4322 - Related: CVE-2014-0050 Tenable has extracted the preceding description block directly from the Orac...

RedHat Update for tomcat RHSA-2014:0686-01

The remote host is missing an update for the Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : opera (openSUSE-SU-2011:0103-1)

Opera 11.01 fixes several critical security bugs : - CVE-2011-0681: CVSS v2 Base Score: 4.3 MEDIUM AV:N/AC:M/Au:N/C:N/I:P/A:N: Other CWE-Other - CVE-2011-0682: CVSS v2 Base Score: 9.3 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C: Buffer Errors CWE-119 - CVE-2011-0683: CVSS v2 Base Score: 4.3 MEDIUM...

CVE-2014-0686

Cisco Unified Communications Manager aka Unified CM 9.1 2.10000.28 and earlier allows local users to gain privileges by leveraging incorrect file permissions, aka Bug IDs CSCul24917 and CSCul24908...

CVE-2014-0686

Cisco Unified Communications Manager (Unified CM) 9.1 (2.10000.28) and earlier is affected by a local privilege-escalation vulnerability due to incorrect file permissions on underlying OS-level commands. An authenticated, local attacker could manipulate specific commands to gain elevated privileg...

CVE-2013-0686

CVE-2013-0686 affects Invensys Wonderware Information Server (WIS) 4.0 SP1SP1, 4.5 Portal, and 5.0 Portal. The root cause is an XML External Entity (XXE) vulnerability in XML parsing, enabling remote attackers to read local/remote files, send HTTP requests to intranet servers, or cause DoS via cr...

Fedora Update for rubygem-activesupport FEDORA-2013-0686

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for rubygem-activemodel FEDORA-2013-0686

Check for the Version of rubygem-activemodel OpenVAS Vulnerability Test Fedora Update for rubygem-activemodel FEDORA-2013-0686 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

Slackware: Security Advisory (SSA:2004-207-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: opera, opera-devel, linux-opera

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

VMware WebAccess URL转发安全漏洞

BUGTRAQ ID: 39103 CVE ID: CVE-2010-0686 VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。 VMWare的WebAccess组件没有充分地验证用户所提供的输入，允许将入站请求转发到其他目的地。所转发的目标无法看到请求URL的真实来源，只能看到运行WebAccess的机器地址。攻击者可以利用这个转发漏洞伪造源址定向服务器上通讯。 VMWare Server 2.0 VMWare VirtualCenter 2.5 VMWare VirtualCenter 2.0.2 VMWare ESX 3.5...