CVE-2014-1364

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1364

WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other...

CVE-2014-1364

CVE-2014-1364 affects WebKit as used in Apple iOS up to 7.1.2, Safari up to 6.1.5 and 7.x up to 7.0.5, and Apple TV up to 6.1.2. A crafted web site can cause remote code execution or memory corruption leading to a crash (DoS). Root cause: memory corruption in WebKit. Exploitation is not detailed ...

Oracle <= 9i / 10g (extproc) - Local/Remote Command Execution Exploit

No description provided by source. -- -- $Id: raptororaextproc.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororaextproc.sql - command exec via oracle extproc -- Copyright c 2006 Marco Ivaldi [email protected] -- -- Directory traversal vulnerability in extproc in Oracle 9i and 10g --...

Mac OS X : Apple Safari < 6.1.5 / 7.0.5 Multiple Vulnerabilities

The version of Apple Safari installed on the remote Mac OS X host is a version prior to 6.1.5 or 7.0.5. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code...

CVE-2013-1364

Summary: CVE-2013-1364 affects Zabbix prior to 1.8.16 and 2.x prior to 2.0.5rc1, where the user.login function can be abused to override LDAP configuration via the cnf parameter, enabling a remote attacker to modify LDAP settings. Root cause: insecure handling of the cnf parameter in user.login l...

Fedora Update for zabbix FEDORA-2013-18348

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 : bind97 (ELSA-2012-1364)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1364 advisory. 32:9.7.0-10.P2.4 - fix CVE-2012-5166 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 6 : kdelibs (ELSA-2011-1364)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1364 advisory. 6:4.3.4-11.4 - Resolves: bz743951, use ca-certificates' ca-bundle.crt 6:4.3.4-11.3 - Resolves: bz743515, CVE-2011-3365 - input validation failure Tenable has...

Fedora Update for zabbix FEDORA-2013-1002

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : zabbix-1.8.16-1.fc17 (2013-1002)

Solves CVE-2013-1364, see http://sourceforge.net/mailarchive/forum.php?threadname=50F832DA.5090 407%40zabbix.com&forumname=zabbix-announce Release notes : http://www.zabbix.com/rn1.8.16.php Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 18 : zabbix-2.0.4-3.fc18 (2013-1082)

Solves CVE-2013-1364, see http://sourceforge.net/mailarchive/forum.php?threadname=50F832DA.5090 407%40zabbix.com&forumname=zabbix-announce New upstream release 2.0.4 This build contains additional patches for : - ZBX-6101 -- SNMP traps were not processed in maintenances with data collection -...

RHEL 5 : bind97 (RHSA-2012:1364)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1364 advisory. - bind: Specially crafted DNS data can cause a lockup in named CVE-2012-5166 Note that Nessus has not tested for this issue but has instead relied on...

CVE-2012-1364

Cisco UCS Fabric Interconnect SNMP processing vulnerability (CVE-2012-1364) affects Cisco UCS 1.4 and 2.0. An authenticated, remote attacker can trigger a DoS (device reload) by sending malformed SNMP requests to the FI device. Root cause relates to errors in SNMP message processing. Cisco adviso...

Scientific Linux Security Update : libwmf on SL4.x, SL5.x i386/x86_64

A pointer use-after-free flaw was found in the GD graphics library embedded in libwmf. An attacker could create a specially crafted WMF file that would cause an application using libwmf to crash or, potentially, execute arbitrary code as the user running the application when opened by a victim...

RedHat Update for kdelibs RHSA-2011:1364-01

Check for the Version of kdelibs OpenVAS Vulnerability Test RedHat Update for kdelibs RHSA-2011:1364-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for kdelibs RHSA-2011:1364-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Design/Logic Flaw

The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent use of the os module, which allows local users to bypass intended access restrictions and execute arbitrary commands via a fileblobstorage.os reference within the code parameter to...

CVE-2011-1364

Cross-site request forgery CSRF vulnerability in ah/admin/interactive/execute aka the Interactive Console in the SDK Console aka Admin Console in the Google App Engine Python SDK before 1.5.4 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrar...

CVE-2011-1364

CVE-2011-1364 describes a CSRF vulnerability in the Google App Engine Python SDK before 1.5.4, specifically in the Interactive Console at _ah/admin/interactive/execute. The flaw allows remote attackers to hijack administrator authentication for requests that execute arbitrary Python code via the ...