123 matches found
Microsoft Windows Multiple Vulnerabilities (KB4103731)
This host is missing a critical security update according to Microsoft KB4103731 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Acrobat and Reader JavaScript API Code Execution (APSB15-02: CVE-2016-0943)
A restriction bypass privileged JavaScript API execution vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the use of a trusted function which provides certain privileges that allow overwriting objects. A remote attacker can exploit this vulnerability by enticing the...
Adobe Acrobat Multiple Vulnerabilities - 01 (Jan 2016) - Mac OS X
Adobe Acrobat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat"; ifdescription...
CVE-2016-0943
Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X mishandle the Global object, which allows attackers to bypass JavaScript API execution restrictions via...
CVE-2016-0943
Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X mishandle the Global object, which allows attackers to bypass JavaScript API execution restrictions via...
CVE-2016-0943
Adobe Acrobat/Reader before 11.0.14, DC Classic before 15.006.30119, or DC Continuous before 15.010.20056 on Windows/macOS are affected by a flaw that mishandles the Global object, allowing bypass of JavaScript API execution restrictions via unspecified vectors. A remote attacker could exploit th...
CVE-2015-0943
Basware Banking/Maksuliikenne, prior to version 9.10.0.0, transmits client–backend data unencrypted, enabling network attackers to sniff keys, credentials and sensitive information or modify traffic. The vulnerability affects the Windows-based thick client/server setup (Solid DB on the server). R...
kexec security update
CentOS Errata and Security Advisory CESA-2014:0943 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2014-July/082610.html Affected packages: kexec-tools kexec-tools-eppic...
openSUSE Security Update : libmodplug (openSUSE-SU-2011:0943-1)
This update of libmodplug0 fixes the following issues : 1 An integer overflow error exists within the 'CSoundFile::ReadWav' function src/loadwav.cpp when processing certain WAV files. This can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially crafted W...
CVE-2014-0943
IBM WebSphere Commerce 6.0 Feature Pack 2–5, 7.0.0.0–7.0.0.8, and 7.0 Feature Pack 1–7 are affected by CVE-2014-0943. The vulnerability allows remote attackers to cause a denial of service (resource consumption and daemon crash) via a malformed id parameter in a request. The description and conne...
CVE-2012-0943
debian/guest-account in Light Display Manager lightdm 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT per ADT1/ADT2 due to different codebases and...
CVE-2012-0943
debian/guest-account in Light Display Manager lightdm 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT per ADT1/ADT2 due to different codebases and...
CVE-2012-0943
debian/guest-account in Light Display Manager lightdm 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT per ADT1/ADT2 due to different codebases and...
CVE-2012-0943
CVE-2012-0943 concerns debian/guest-account in LightDM (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu 11.10. Affected component: guest-account cleanup in LightDM; root cause described as a vulnerability allowing local users to delete arbitrary files via a space in the name...
CVE-2013-0943
CVE-2013-0943 affects EMC NetWorker 7.6.x and 8.x prior to 8.1. A privileged local user can leverage the nsradmin utility under OS privileges to decrypt data and obtain sensitive configuration information, yielding a confidential data disclosure vulnerability. The root cause centers on how nsradm...
KLA10146 OSI vulnerability in EMC NetWorker
An unspecified vulnerability was found in EMC NetWorker. By exploiting this vulnerability malicious users can obtain configuration information. This vulnerability can be exploited locally. Original advisories - Related products EMC-NetWorker CVE list CVE-2013-0943 warning Solution Update to lates...
ESA-2013-033: EMC NetWorker Information Disclosure Vulnerability
ESA-2013-033.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-033: EMC NetWorker Information Disclosure Vulnerability EMC Identifier: ESA-2013-033 EMC Identifier: NW144712 CVE Identifier: CVE-2013-0943 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected products...
Ubuntu Update for gdm-guest-session USN-1399-1
Ubuntu Update for Linux kernel vulnerabilities USN-1399-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13991.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for gdm-guest-session USN-1399-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...
CVE-2012-0943
debian/guest-account in Light Display Manager lightdm 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT per ADT1/ADT2 due to different codebases and...
