CVE-2015-1652

Microsoft Internet Explorer 6–11 contains a memory-corruption vulnerability exploitable via a crafted web site (remote code execution or memory COI) identified as CVE-2015-1652. The issue is documented as a separate memory-corruption entry from CVE-2015-1666. Multiple connected advisories (CNVD/O...

Microsoft Internet Explorer Memory Corruption (MS15-032: CVE-2015-1652)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

UltraVNC VNCLog Buffer Overflow - Ver2 (CVE-2006-1652)

UltraVNC is an open source client/server remote control application which uses the Virtual Network Computing VNC protocol. The VNC protocol allows a user to control a remote host by sending mouse and keyboard events, and receiving screen and sound updates. UltraVNC offers several extra features a...

Oracle Linux 6 / 7 : openssl (ELSA-2014-1652)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1652 advisory. - fix CVE-2014-3567 - memory leak when handling session tickets - fix CVE-2014-3513 - memory leak in srtp support - add support for fallback SCSV t...

Symantec Web Gateway Multiple PHP Pages Cross Site Scripting (CVE-2014-1652)

A cross-site scripting vulnerability exists in Symantec Web Gateway. Successful exploitation could result in attacker-controlled script code being executed in the browser context of the Symantec Web Gateway management console. The vulnerability is due to improper validation of "variable",...

Symantec Web Gateway < 5.2.1 Multiple Vulnerabilities (SYM14-010)

According to its self-reported version number, the remote web server is hosting a version of Symantec Web Gateway prior to version 5.2.1. It is, therefore, affected by the following vulnerabilities : - A remote command execution flaw exists with the 'SNMPConfig.php' where user input is not proper...

CVE-2014-1652

Symantec Web Gateway (SWG) management console prior to 5.2 is affected by CVE-2014-1652: multiple cross-site scripting vulnerabilities allow remote authenticated users to inject script via unspecified report parameters (e.g., entSummary.php, custom_report.php, host_spy_report.php, repairedclients...

Symantec Web Gateway Security Issues

SUMMARY Symantec Web Gateway SWG 5.2 Appliance management console is susceptible to security issues. Successful exploitation could result in unauthorized command execution on or access to the management console. There is also potential for unauthorized backend database manipulation. AFFECTED...

openSUSE Security Update : puppet (openSUSE-2013-295)

Various security issues were fixed in puppet. CVE-2013-1655 CVE-2013-2275 CVE-2013-1640 CVE-2013-1652 CVE-2013-1653 CVE-2013-1654 CVE-2013-1655 CVE-2013-2274 CVE-2013-2275 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

Fedora Update for puppet FEDORA-2013-3935

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : puppet-3.1.1-1.fc18 (2013-3935)

Security release from upstream. https://groups.google.com/group/puppet-announce/browsethread/thread/7 ff8326dc79257a1 update to 3.1.0 with proper handling of Systemd. Here is where you give an explanation of your update. Note that Tenable Network Security has extracted the preceding description...

CVE-2013-2331

Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1652...

Design/Logic Flaw

Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1652...

CVE-2013-2331: Undefined Security Weakness

Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1652...

Fedora Update for puppet FEDORA-2013-4187

Check for the Version of puppet OpenVAS Vulnerability Test Fedora Update for puppet FEDORA-2013-4187 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for puppet FEDORA-2013-4187

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : puppet-2.7.21-2.fc17 (2013-4187)

Updates for the security announcements from Puppet Labs on 12-Mar-2013. https://groups.google.com/group/puppet-announce/t/9200f268f8479e2c This update also provides backported fixes for a number of issues with ruby-1.9. Note that Tenable Network Security has extracted the preceding description...

CVE-2013-1652

CVE-2013-1652 affects Puppet: remote authenticated users with a valid certificate and key can read arbitrary catalogs or poison the Puppet master’s cache via unspecified vectors. Affected versions include Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, plus Puppet Enterprise be...

Ubuntu 11.10 / 12.04 LTS / 12.10 : puppet vulnerabilities (USN-1759-1)

It was discovered that Puppet agents incorrectly handled certain kick connections in a non-default configuration. An attacker on an authenticated client could use this issue to possibly execute arbitrary code. CVE-2013-1653 It was discovered that Puppet incorrectly handled certain catalog request...

[SECURITY] [DSA 2643-1] puppet security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2643-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 12, 2013 http://www.debian.org/security/faq -...