105 matches found
CVE-2019-0929
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'...
CVE-2019-0929
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory Corruption Vulnerability'...
CVE-2019-0929
CVE-2019-0929 is Microsoft Internet Explorer Memory Corruption Vulnerability. The issue arises when Internet Explorer improperly accesses objects in memory, potentially allowing remote code execution with the current user’s privileges. Affected software is Internet Explorer on Windows; the vulner...
Microsoft Windows Multiple Vulnerabilities (KB4499167)
This host is missing a critical security update according to Microsoft KB4499167 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
KLA11478 Multiple vulnerabilities in Microsoft Browsers
Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory...
SUSE SLES15 Security Update : xmltooling (SUSE-SU-2019:0929-1)
This update for xmltooling fixes the following issues : Security issue fixed : CVE-2019-9628: Fixed an improper handling of exception in XMLTooling library which could result in denial of service against the application using XMLTooling bsc1129537. Note that Tenable Network Security has extracted...
U.S. Dept Of Defense: https://████████ Impacted by DNN ImageHandler SSRF
Summary: https://███████ runs DNN 8.0.0 to 9.1.1 and is impacted by CVE 2017-0929 allowing for a SSRF through the DNN ImageHandler. Origin servers will request any image file supplied by the attacker. This allows for internal NIPR sites to be mapped and accessed through a vulnerable host. The...
CVE-2017-0929
CVE-2017-0929 affects DotNetNuke (DNN) before 9.2.0. A Server-Side Request Forgery (SSRF) vulnerability exists in the DnnImageHandler class, enabling an attacker to access internal network resources. The issue is mitigated by upgrading DNN to version 9.2.0 or above. If exploiting details are prov...
CVE-2018-0929
Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow information disclosure, due to how Internet Explorer handles objects in memory, aka...
CVE-2018-0929
CVE-2018-0929: Internet Explorer information disclosure vulnerability in multiple Windows versions related to memory handling. Connected Microsoft KB updates (Mar 2018 rollups) include IE security fixes and mitigations; exploits status not specified in provided docs. Affected software/versions ar...
Microsoft Internet Explorer Memory Corruption And Information Disclosure Vulnerabilities (KB4089187)
This host is missing an important security update according to Microsoft security updates KB4089187. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
KB4088779: Windows 10 Version 1511 March 2018 Security Update
The remote Windows host is missing security update 4088779. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Windows Remote Assistance incorrectly processes XML External Entities XXE. An attacker who successfully exploited the...
KB4088878: Windows 7 and Windows Server 2008 R2 March 2018 Security Update (Meltdown)(Spectre)
The remote Windows host is missing security update 4088878 or cumulative update 4088875. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local...
KB4088879: Windows 8.1 and Windows Server 2012 R2 March 2018 Security Update (Meltdown)(Spectre)
The remote Windows host is missing security update 4088879 or cumulative update 4088876. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local...
Virtuozzo Linux Errata and Bugfix Advisory 2017:0929
Upstream security update. Follow RHBA-2017-0929 for details...
CVE-2016-0929
What is affected: RabbitMQ for Pivotal Cloud Foundry (PCF) 1.6.x (metrics-collection component) before 1.6.4. Vulnerability details: The metrics-collection component logs command lines of failed commands, which may allow context-dependent attackers to read log data and obtain sensitive informatio...
CVE-2015-0929
time.htm in the web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a78 allows remote attackers to bypass authentication and obtain administrative access by leveraging a cookie received in an HTTP response...
CVE-2015-0929
Affected product/variant: SerVision HVG Video Gateway devices with firmware up to 2.2.26a78 (and variants through 2.2.26a100 per sources). Vulnerability: time.htm in the web interface allows remote authenticated/unprivileged users to bypass authentication and obtain elevated/admin access by lever...
CVE-2015-0929
time.htm in the web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a78 allows remote attackers to bypass authentication and obtain administrative access by leveraging a cookie received in an HTTP response...
SuSE Update for xulrunner openSUSE-SU-2013:0929-1 (xulrunner)
Check for the Version of xulrunner OpenVAS Vulnerability Test $Id: gbsuse201309291.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for xulrunner openSUSE-SU-2013:0929-1 xulrunner Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This...