KB4598297: Windows Server 2012 January 2021 Security Update

The remote Windows host is missing security update 4598297 or cumulative update 4598278. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-17087, CVE-2021-1648, CVE-2021-1649,...

Junos OS Multiple vulnerabilities (JSA11075)

According to its self-reported version number, the remote Juniper Junos device is affected by a memory leak within the EVPN protocol. It, Therefore, could allow for a adjacent unauthenticated attacker to crash the EVPN protocol with specifically crafted BGP packets. Note that Nessus has not teste...

CVE-2020-1678

On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is exhausted the rpd process might crash. If the issue occurs, the memory leak could be seen by executing the "show task memory detail | match...

CVE-2020-1678 Junos OS and Junos OS Evolved: RPD can crash due to a slow memory leak.

On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is exhausted the rpd process might crash. If the issue occurs, the memory leak could be seen by executing the "show task memory detail | match...

CVE-2020-1678

CVE-2020-1678 affects Juniper Networks Junos OS and Junos OS Evolved on devices with EVPN configured. The issue is a slow memory leak triggered by receipt of specific BGP EVPN traffic, which can exhaust memory and cause the rpd process to crash. The vulnerability is evidenced by repeated queries ...

CVE-2010-1678

creationtimestamp| type| source ---|---|--- 2019-10-29 23:26:26+00:00| seen| https://t.me/cibsecurity/7756 2024-01-29 14:41:42+00:00| seen| https://t.me/ctinow/175265...

CVE-2010-1678

Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 contain an input validation error in Mapfile parsing due to improper validation of symbol index values. This can lead to a segmentation fault/crash. A fix is available in 5.6.5-2 (and later); upgrading is recommended.

Cross-Site Scripting (XSS)

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

CVE-2019-1678

The CVE-2019-1678 entry concerns Cisco Meeting Server. Affected product: Cisco Meeting Server (CMS) where the issue lies in improper validation of coSpaces configuration parameters. The root cause enables an authenticated, remote attacker to cause a partial denial of service to Cisco Meetings use...

Ubuntu: Security Advisory (USN-2992-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2992-1: Oxide vulnerabilities

An unspecified security issue was discovered in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin restrictions. CVE-2016-1673 An issue was discovered with Document reattachment in Blink in some circumstances. ...

CVE-2016-1678

objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JavaScript code...

CVE-2016-1678

Removed by vendor...

CVE-2016-1678

CVE-2016-1678 describes a heap overflow in the V8 JavaScript engine (used by Google Chrome) due to insufficient restriction of lazy deoptimization in objects.cc. Affected software includes V8 up to 5.0.71.32 and Google Chrome up to 51.0.2704.63. Exploitation could allow a remote attacker to cause...

Oracle: Security Advisory (ELSA-2009-1075)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-1220)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2013-0820)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-1678

creationtimestamp| type| source ---|---|--- 2015-05-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37049 2026-07-29 12:01:36+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPBgA 2026-07-30 00:01:58+00:00| seen| Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJk2WzpXql3KPPB...

CVE-2015-1678

Technical details about CVE-2015-1678 are not provided in the connected documents. The initial entry notes a kernel memory disclosure via Win32k.sys, but lacks specific vulnerable components, affected products, or fixes in the supplied sources. Monitor for updates.

Microsoft Windows Kernel-Mode Driver Privilege Elevation Vulnerability (3045171)

This host is missing an important security update according to Microsoft Bulletin MS15-051. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...