175 matches found
CVE-2010-1154
CVE-2010-1154 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-1154
IBM Algo One - Algo Risk Application (ARA) versions 4.9.1, 5.0, and 5.1.0 contain a vulnerability that could allow a user to access files in the local environment that should not be viewable by application users. The IBM security bulletin for CVE-2017-1154 notes this as a file-access issue and li...
Mageia: Security Advisory (MGASA-2016-0116)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-1154
SQL injection vulnerability in the Help plug-in 1.3.5 and earlier in Cuore EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2016-1154
Cuore EC-CUBE Help plug-in (version 1.3.5 and earlier) contains an SQL injection (CWE-89) vulnerability. Remote attackers can execute arbitrary SQL via unspecified vectors, potentially exposing or altering database information. The affected component is the Help plug-in for EC-CUBE created by Cuo...
Oracle: Security Advisory (ELSA-2011-1154)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SOL16870 - logrotate vulnerability CVE-2011-1154
Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...
CVE-2015-1154
WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-1152 and CVE-2015-1153...
Memory corruption
WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2015-1152 and CVE-2015-1154...
CVE-2015-1154
CVE-2015-1154 relates to WebKit used in Apple Safari. The vulnerability allows a remote attacker to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site. Affected are Safari Thorn versions: before 6.2.6, 7.x before 7.1.6, and 8.x bef...
Apple Fixes WebKit Vulnerabilities in Safari Browser
Apple has updated its Safari browser, fixing a handful of exploitable WebKit flaws in various versions of Safari. WebKit is the core layout engine responsible for rendering webpages in the Safari browser. The first bulletin, vulnerabilities uncovered by Apple, resolves multiple memory corruption...
openSUSE Security Update : logrotate (openSUSE-SU-2011:0536-1)
This update for logrotate provides the following fixes : dbg114-logrotate-4580 logrotate-4580 newupdateinfo The shredfile function in logrotate might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is...
Oracle Linux 6 : logrotate (ELSA-2011-0407)
The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-0407 advisory. 3.7.8-12.1 - fix 688518 - fixed CVE-2011-1154, CVE-2011-1155 and CVE-2011-1098 Tenable has extracted the preceding description block directly from the...
CVE-2013-1154
The CVE-2013-1154 entry concerns Cisco Small Business switches (200 Series Smart Switch, 300 Series Managed Switch, and 500 Series Stackable Managed Switch) with software version 1.2.7.76 and earlier. The issue allows remote attackers to cause a denial of service on SSH/SSL-related features by se...
RHEL 5 / 6 : mod_cluster (RHSA-2012:1052)
Updated modcluster packages that fix one security issue are now available for JBoss Enterprise Application Platform 5.1.2 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CV...
CVE-2012-1154
CVE-2012-1154 concerns mod_cluster, where a regression in JBoss Enterprise Web Platform 5.1.2 causes the server root context to be registered and exposed by default when ROOT is in the excludedContexts list. This allows remote attackers to bypass access restrictions and access applications deploy...
Moderate: Red Hat Security Advisory: mod_cluster security update
Updated modcluster packages that fix one security issue are now available for JBoss Enterprise Web Server 1.0.2 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...
Scientific Linux Security Update : logrotate on SL6.x i386/x86_64
A shell command injection flaw was found in the way logrotate handled the shred directive. A specially crafted log file could cause logrotate to execute arbitrary commands with the privileges of the user running logrotate root, by default. Note: The shred directive is not enabled by default...
Moderate: Red Hat Security Advisory: mod_cluster security update
Updated modcluster packages that fix one security issue are now available for JBoss Enterprise Web Platform 5.1.2 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...