Ceragon FiberAir IP-10 Microwave Bridge contains a default root password

Overview Ceragon FiberAir IP-10 Microwave Bridge contains a default root password. Description CWE-255:Credentials Management Ceragon FiberAir IP-10 Microwave Bridges contain a default root password. The root account can be accessed through ssh, telnet, command line interface, or via HTTP. The...

CentOS Update for kernel CESA-2014:0924 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for kernel RHSA-2014:0924-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : kernel (ELSA-2014-0924)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0924 advisory. - netdrv pppol2tp: fail when socket option level is not SOLPPPOL2TP 1119461 1119462 CVE-2014-4943 Tenable has extracted the preceding description block...

CVE-2014-0924

Summary: IBM MessageSight 1.0 and 1.1 are affected by CVE-2014-0924. The issue arises because the server does not verify that all characters of a password are correct, enabling remote authenticated users to bypass access restrictions using a password substring. Impact: Bypass of authentication fo...

FreeBSD : chromium -- multiple vulnerabilities (bdd48858-9656-11e2-a9a8-00262d5ed8ee)

Google Chrome Releases reports : 172342 High CVE-2013-0916: Use-after-free in Web Audio. Credit to Atte Kettunen of OUSPG. 180909 Low CVE-2013-0917: Out-of-bounds read in URL loader. Credit to Google Chrome Security Team Cris Neckar. 180555 Low CVE-2013-0918: Do not navigate dev tools upon drag a...

Google Chrome Multiple Vulnerabilities-01 April 2013 (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln01apr13win.nasl 6125 2017-05-15 09:03:42Z teissa $ Google Chrome Multiple Vulnerabilities-01 April 2013 Windows Authors: Arun Kallavi Copyright: Copyright c 20...

Google Chrome Multiple Vulnerabilities-01 (Apr 2013) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-0924

CVE-2013-0924 affects Google Chrome’s extension functionality. The issue concerns the permissions API: Chrome before 26.0.1410.43 does not verify that how permissions are used is consistent with file permissions, with the description indicating an unspecified impact and attack vectors. Connected ...

Stable Channel Update

The Chrome team is excited to announce the promotion of Chrome 26 to the Stable Channel. Chrome 26.0.1410.43 for Windows, Mac, Linux, and Chrome Frame contains number of new items including: "Ask Google for suggestions" spell checking feature improvements e.g. grammar and homonym checking Desktop...

CVE-2012-0924

RealNetworks RealPlayer 11.x, 14.x and 15.x (before 15.0.2.71) and RealPlayer SP 1.0–1.1.5 are affected by a VIDOBJ_START_CODE handling flaw in MPEG streams that allows remote code execution. The vulnerability arises in the dmp4.dll decoding path when processing a VIDOBJ_START_CODE object, leadin...

Real Networks RealPlayer 'VIDOBJ_START_CODE'远程代码执行漏洞

Bugtraq ID: 51885 CVE ID：CVE-2012-0924 RealNetworks RealPlayer是一款流行的媒体播放程序 RealNetworks RealPlayer处理VIDOBJSTARTCODE段存在未明错误，远程攻击者可以构建恶意媒体文件，诱使用户解析，以应用程序上下文执行任意代码 0 RealPlayer 15.x 厂商解决方案 RealPlayer 15.0.2.71已经修复此漏洞，建议用户下载使用： http://www.real.com...

Real Networks RealPlayer < 15.0.2.72 Multiple Vulnerabilities

Binary data 6311.prm...

RealPlayer for Windows < 15.0.2.71 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is earlier than 15.0.2.71. As such, it is affected by multiple vulnerabilities : - Errors exist related to 'rvrender RMFF' flags, 'RV20' frame size arrays, 'VIDOBJSTARTCODE', 'RV40', 'RV10',...

CVE-2011-0924

HP OpenView Storage Data Protector (Data Protector) client vulnerable via the EXEC_CMD handling: it does not verify file contents, allowing remote code execution by embedding malicious code in a file and using a trusted filename (e.g., omni_chk_ds.sh). Affected versions include Data Protector v6....

CVE-2010-0924

cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.3 and 4.0.4 on Windows, allows remote attackers to cause a denial of service application crash via a long string in the BACKGROUND attribute of a BODY element...

CVE-2010-0924

Apple Safari 4.0.3/4.0.4 on Windows is affected by CVE-2010-0924 due to cfnetwork.dll 1.450.5.0 in CFNetwork. The vulnerability allows a remote attacker to cause an application crash (DoS) by supplying a long string in the BACKGROUND attribute of a BODY element. The issue is triggered in the Safa...

CVE-2009-0924

CVE-2009-0924 affects Sun OpenSolaris (snv_39–snv_45) on x86 in 64-bit mode, enabling local users to hang the UFS filesystem write via ufs_getpage/ufs_putapage routines (CR 6442712). Related notes for Solaris 10/OpenSolaris variants indicate OS-level UFS denial of service; stack traces in Seebug ...

CVE-2008-0924

The CVE-2008-0924 issue affects Novell eDirectory (Linux and possibly others) where a stack-based buffer overflow in the DoLBURPRequest path of libnldap/ndsd is triggered by a long delRequest LDAP Extended Request, likely involving a long DN. Affected versions are eDirectory 8.7.3.9 and earlier, ...

Novell eDirectory LDAP扩展请求消息栈溢出漏洞

BUGTRAQ ID: 28434 CVECAN ID: CVE-2008-0924 Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory处理畸形的请求数据时存在缓冲区溢出漏洞，如果向Novell eDirectory服务器发送了超长的LDAP扩展请求消息的话，就可能触发栈溢出，导致执行任意指令。 Novell eDirectory = 8.8.1 Novell eDirectory = 8.7.3.9 Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...