KB4598230: Windows 10 Version 1809 and Windows Server 2019 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

Juniper Junos MX/EX9200 Series: DDoS Vulnerability (JSA11062)

The version of Junos OS installed on the remote host is MX series or EX9200 series prior to 17.2R3-S4, 17.2X75-D102, 17.3R3-S8, 17.4R2-S11,18.2R2-S7, 18.2X75-D30, or 18.3R2-S4. It is, therefore, affected by a vulnerability as referenced in the JSA11062 advisory. Note that Nessus has not tested fo...

CVE-2020-1665

Juniper Junos OS IPv6 DDoS protection can fail to activate under a threshold condition on MX Series and EX9200 Series with Trio-based PFEs. This may allow the Routing Engine (RE) and/or the Flexible PIC Concentrator (FPC) to become overwhelmed, potentially disrupting network protocol operations o...

XML External Entity (XXE)

The openstack-nova packages provide OpenStack Compute code name Nova, which provides services for provisioning, managing, and using virtual machine instances. A denial of service flaw was found in the Extensible Markup Language XML parser used by Nova. A remote attacker could use this flaw to sen...

CVE-2019-1665

Cisco HyperFlex web-based management interface suffers a stored XSS vulnerability (CVE-2019-1665) due to insufficient validation of user input. Affected versions: prior to 3.5(1a). An unauthenticated, remote attacker can lure a user into clicking a malicious link, enabling execution of arbitrary ...

Security Bulletin: IBM MQ Appliance is affected by weak cryptographic algorithms (CVE-2018-1665)

Summary IBM MQ Appliance has addressed the following weak cryptographic algorithms vulnerability. Vulnerability Details CVEID: CVE-2018-1665 DESCRIPTION: IBM WebSphere DataPower Appliances uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive...

CVE-2018-1665

Affected product and scope: IBM DataPower Gateway and related appliances are listed with CVE-2018-1665, affecting multiple VMF/RMF versions of DataPower Gateway and IBM MQ Appliance as detailed in IBM security bulletins. Root cause / vulnerability type: Use of weaker-than-expected cryptographic a...

Security Bulletin: IBM Security Key Lifecycle Manager uses indeaquate encryption strength algorithms (CVE-2017-1665)

Summary IBM Security Key Lifecycle Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. Vulnerability Details CVEID: CVE-2017-1665 DESCRIPTION: IBM Tivoli Key Lifecycle Manager uses weaker than expected cryptographic...

CVE-2017-1665

The CVE-2017-1665 issue affects IBM Security Key Lifecycle Manager (formerly Tivoli Key Lifecycle Manager), specifically versions 2.5, 2.6, and 2.7, where weaker than expected cryptographic algorithms could allow decryption of sensitive information. IBM’s bulletin confirms the affected ranges and...

eporner.com XSS vulnerability

Vulnerable URL: http://www.eporner.com/dot/ntv.php/'-alert/OPENBUGBOUNTY/-'?data=337c347c357c33367c33387c34337c3636 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1665 VIP website status:| Yes Coordinated...

openSUSE Security Update : Chromium (openSUSE-2016-756)

Chromium was updated to 51.0.2704.103 to fix three vulnerabilities : - CVE-2016-1704: Various fixes from internal audits, fuzzing and other initiatives shared identifier boo985397 Includes vulnerability fixes from 50.0.2661.102 boo979859 : - CVE-2016-1667: Same origin bypass in DOM - CVE-2016-166...

openSUSE: Security Advisory for Chromium (openSUSE-SU-2016:1655-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for Chromium (important)

Chromium was updated to 51.0.2704.103 to fix three vulnerabilities: - CVE-2016-1704: Various fixes from internal audits, fuzzing and other initiatives shared identifier boo985397 Includes vulnerability fixes from 50.0.2661.102 boo979859: - CVE-2016-1667: Same origin bypass in DOM - CVE-2016-1668:...

USN-2960-1: Oxide vulnerabilities

An out of bounds write was discovered in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code. CVE-2016-1660 It was discovered that Blink assumes that a frame...

CVE-2016-1665

Removed by vendor...

CVE-2016-1665

CVE-2016-1665 is an information-leak vulnerability in Google Chrome’s V8 JavaScript engine. The issue arises in the JSGenericLowering path (compiler/js-generic-lowering.cc) where Chrome before 50.0.2661.94 mishandled certain comparison operators, enabling remote attackers to obtain sensitive info...

Mageia: Security Advisory (MGASA-2016-0160)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for Chromium (openSUSE-SU-2016:1208-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for Chromium (important)

Chromium was updated to 50.0.2661.94 to fix a number of vulnerabilities boo977830: - CVE-2016-1660: Out-of-bounds write in Blink - CVE-2016-1661: Memory corruption in cross-process frames - CVE-2016-1662: Use-after-free in extensions - CVE-2016-1663: Use-after-free in Blink’s V8 bindings -...

RHEL 6 : chromium-browser (RHSA-2016:0707)

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...