Microsoft Windows Multiple Vulnerabilities (KB4571703)

This host is missing a critical security update according to Microsoft KB4571703 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KB4571692: Windows 10 August 2020 Security Update

The remote Windows host is missing security update 4571692. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could instal...

Security Bulletin: BigInsights is affected by multiple vulnerabilities in BigSheets and Data Server Manager (CVE-2017-1552, CVE-2017-1553, CVE-2017-1554)

Summary BigInsights is affected by multiple UI vulnerabilities in BigSheets and Data Server Manager DSM Vulnerability Details CVEID: CVE-2017-1552 DESCRIPTION: IBM Infosphere BigInsights is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote...

SUSE SLES15 Security Update : slurm_20_02 (SUSE-SU-2020:1554-1)

This update for slurm2002 to version 20.02.3 fixes the following issues : Security issue fixed : CVE-2020-12693: Fixed an authentication bypass via an alternate path or channel bsc1172004. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...

CVE-2018-1554

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting in the Web UI. The issue allows injection of arbitrary JavaScript code, potentially leading to credentials disclosure within a trusted session. Root cause is a client-side XSS in the Maximo Web UI. Affected products include the...

CVE-2017-1554

IBM Infosphere BigInsights 4.2.0 and 4.2.5 are affected by CVE-2017-1554, a UI vulnerability where a remote attacker could hijack a victim’s click actions by enticing them to visit a malicious Web site. The issue is described as a click/action hijack that could enable further attacks within the v...

CVE-2015-1554

kgb-bot 1.33-2 allows remote attackers to cause a denial of service crash...

CVE-2015-1554

kgb-bot 1.33-2 allows remote attackers to cause a denial of service crash...

CVE-2015-1554

kgb-bot 1.33-2 allows remote attackers to cause a denial of service crash...

CVE-2015-1554

CVE-2015-1554 affects kgb-bot 1.33-2. A remote attacker can cause a denial of service (crash). The available connected sources confirm this behavior; no patch/version remediation details are provided in the supplied documents. If exploitation details or fixes are published in the connected record...

Oracle: Security Advisory (ELSA-2012-0062)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2012-48)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2014:1099-1)

Mozilla Firefox was updated to Firefox 32 fixing security issues and bugs. Security issues fixed: MFSA 2014-72 / CVE-2014-1567: Security researcher regenrecht reported, via TippingPoint's Zero Day Initiative, a use-after-free during text layout when interacting with the setting of text direction...

CVE-2014-1554

CVE-2014-1554 concerns multiple vulnerabilities in the Mozilla Firefox browser engine prior to 32.0, enabling remote attackers to cause memory corruption, crash the browser, or potentially execute arbitrary code via unknown vectors. The issue is tied to Firefox 32.x timeframe and is discussed acr...

Firefox < 32.0 Multiple Vulnerabilities (Mac OS X)

The version of Firefox installed on the remote Mac OS X host is a version prior to 32.0. It is, therefore, affected by the following vulnerabilities : - Multiple memory safety flaws exist within the browser engine. Exploiting these, an attacker can cause a denial of service or execute arbitrary...

CVE-2014-1554

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 32.0 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution

No description provided by source. Exploit Title: HP OpenView NNM getnnmdata.exe CGI Invalid ICount Remote Code Execution Date: 2010.07.02 Author: S2 Crew Hungary Software Link: hp.com Version: 7.53 Tested on: Windows 2003 CVE: CVE-2010-1554 Code : !/usr/bin/python import struct import socket...

HP OpenView Network Node Manager getnnmdata.exe (ICount) CGI Buffer Overflow

No description provided by source. $Id: hpnnmgetnnmdataicount.rb 12121 2011-03-24 00:49:33Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

openSUSE Security Update : t1lib (openSUSE-SU-2012:0559-1)

Specially crafted type1 fonts could cause memory corruptions in t1lib %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-249. The text description of this plugin is C SUSE LLC...

Oracle Linux 5 : tetex (ELSA-2012-1201)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1201 advisory. - more robust fix for CVE-2010-3702 773178 - apply patch for CVE-2010-3702,3704 773180 Tenable has extracted the preceding description block directly...