122 matches found
CVE-2015-1832
XML external entity XXE vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service resource consumption via vectors involving XmlVTI and the XML dataty...
CVE-2016-1832
CVE-2016-1832 affects Apple's libc in tvOS (Apple TV 4th generation) and related Apple platforms. Description from the TV security content indicates a memory corruption issue in libc that could allow a local attacker to cause termination or arbitrary code execution; impact is local and memory-cor...
CVE-2016-1832
libc in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...
CVE-2014-1832
CVE-2014-1832 affects Phusion Passenger 4.0.37 and is caused by insecure handling of temporary files, enabling a local attacker to perform a symbolic/link attack on (1) control_process.pid or (2) generation-* files. This allows writing to certain files/directories with local access. The issue ari...
Fedora Update for rubygem-passenger FEDORA-2015-1151
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : ecryptfs-utils (openSUSE-SU-2011:0902-1)
This update of ecryptfs-utils fixes several security problems : - CVE-2011-1831 - Race condition when checking mountpoint during mount. - CVE-2011-1832 - Race condition when checking mountpoint during unmount. - CVE-2011-1833 - Race condition when checking source during mount. - CVE-2011-1834 -...
CVE-2011-1832
utils/mount.ecryptfsprivate.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a umount system call...
CVE-2011-1832
CVE-2011-1832 affects ecryptfs-utils prior to version 90. A race condition in mount.ecryptfs_private’s mountpoint permission check could allow a local user to remove directories via an unmount call. The issue stems from inadequate validation before unmount/mount operations, enabling potential man...
CVE-2013-4837
Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832...
CVE-2013-4837
Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1832...
CVE-2013-4837
HP LoadRunner CVE-2013-4837 affects the Virtual User Generator (VUG) prior to version 11.52, enabling remote code execution via unknown vectors (ZDI-CAN-1832). Multiple connected advisories corroborate a broader EmulationAdmin exposure in HP LoadRunner 11.52-era deployments, including a directory...
Oracle Linux 5 / 6 : ecryptfs-utils (ELSA-2011-1241)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1241 advisory. - privilege escalation via mountpoint race conditions CVE-2011-1831, CVE-2011-1832 - race condition when checking source during mount CVE-2011-1833...
Fedora Update for moodle FEDORA-2013-4387
Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2013-4387 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora 18 : moodle-2.3.6-1.fc18 (2013-4387)
Fix for CVEs: CVE-2012-3363 CVE-2013-1830 CVE-2013-1831 CVE-2013-1832 CVE-2013-1833 CVE-2013-1834 CVE-2013-1835 CVE-2013-1836 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...
Fedora 17 : moodle-2.2.9-1.fc17 (2013-4404)
Fix for CVEs: CVE-2012-3363 CVE-2013-1830 CVE-2013-1831 CVE-2013-1832 CVE-2013-1833 CVE-2013-1834 CVE-2013-1835 CVE-2013-1836 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...
CVE-2013-1832
Moodle vulnerability CVE-2013-1832: repository/webdav/lib.php in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 stores the WebDAV password in the configuration form, enabling remote authenticated administrators to obtain sensitive information by configur...
CVE-2013-1832
repository/webdav/lib.php in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 includes the WebDAV password in the configuration form, which allows remote authenticated administrators to obtain sensitive information by configuring an instance...
Slackware Advisory SSA:2009-176-01 seamonkey
The remote host is missing an update as announced via advisory SSA:2009-176-01. OpenVAS Vulnerability Test $Id: esoftslkssa200917601.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
CVE-2012-1832
WellinTech KingView 6.53 is affected by CVE-2012-1832: an out-of-bounds read vulnerability exploitable by a crafted packet to port 2001 (TCP/UDP). The issue may enable arbitrary code execution or DoS in the KingView application. Multiple connected sources corroborate the vulnerability details, in...