Medium: kernel

Issue Overview: The pnrecvmsg function in net/phonet/datagram.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel stack memory via a 1...

Fedora Update for kernel FEDORA-2014-2576

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for kernel FEDORA-2014-2576

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2014-2576 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

CVE-2014-1874

The securitycontexttosidcore function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause a denial of service system crash by leveraging the CAPMACADMIN capability to set a zero-length security context...

Adobe JRun 4.0 Multiple Vulnerabilities (APSB09-12)

The remote host has a version of Adobe JRun installed that contains a version of jmc-app.ear that is affected by multiple vulnerabilities : - A directory traversal vulnerability exists in 'logviewer.jsp' in the Management Console that could allow an authenticated, remote attacker to read arbitrar...

Ubuntu 12.04 LTS / 12.10 / 13.04 : dbus vulnerability (USN-1874-1)

Alexandru Cornea discovered that DBus incorrectly handled certain messages. A local attacker could use this issue to cause system services to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

Microsoft Internet Explorer 8 / 9 Toolbar Code Execution(CVE-2012-1874)

No description provided by source. CAL-2012-0023Microsoft IE Developer Toolbar Remote Code Execution Vulnerability CVE ID: CVE-2012-1874 http://technet.microsoft.com/en-us/security/bulletin/ms12-037...

CVE-2012-1874

CVE-2012-1874 concerns Microsoft Internet Explorer 8 and 9. A use-after-free vulnerability in the IE Developer Toolbar leads to remote code execution when accessing a freed console object, due to incorrect handling of object lifetimes in memory. Public details from security analyses describe a he...

Internet Explorer Developer Toolbar Remote Code Execution (MS12-037; CVE-2012-1874)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer...

Windows Win32k.sys本地权限提升漏洞(CVE-2011-1874)(MS11-054)

BUGTRAQ ID: 48587 CVE ID: CVE-2011-1874 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows在实现上存在Win32k释放后重用漏洞，攻击者可利用此漏洞在内核模式下运行任意代码。 权限提升漏洞源于Windows内核模式驱动程序管理内核模式驱动程序对象的方式存在问题。 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 厂商补丁： Microsof...

CVE-2011-1874

Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a crafted application...

CVE-2011-1874

CVE-2011-1874 is a local privilege-escalation vulnerability in Windows kernel-mode drivers, caused by a use-after-free in Win32k.sys due to incorrect driver object management. Affected products span Windows XP SP2–SP3, Server 2003 SP2, Vista SP1–SP2, Server 2008 Gold/SP2/R2/R2 SP1, and Windows 7 ...

CVE-2010-1874

SQL injection vulnerability in the Real Estate Property comproperties component 3.1.22-03 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1874

SQL injection vulnerability in the Real Estate Property comproperties component 3.1.22-03 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php. NOTE: some of these details are obtained from third party information...

CVE-2010-1874

CVE-2010-1874 concerns the Joomla! Real Estate Property (com_properties) component, version 3.1.22-03, where the 'aid' parameter in an agentlisting action of index.php is vulnerable to SQL injection. The underlying cause is improper sanitization, allowing remote attackers to execute arbitrary SQL...

Debian DSA-1874-1 : nss - several vulnerabilities

Several vulnerabilities have been discovered in the Network Security Service libraries. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2404 Moxie Marlinspike discovered that a buffer overflow in the regular expression parser could lead to the...

openSUSE Security Update : virtualbox-ose (virtualbox-ose-1874)

This update of virtualbox-ose fixes a memory consumption bug in the kernel code that can be used to allocate almost all physical memory. CVE-2009-3940: CVSS v2 Base Score: 2.1 LOW AV:L/AC:L/Au:N/C:N/I:N/A:P %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

Debian Security Advisory DSA 1874-1 (nss)

The remote host is missing an update to nss announced via advisory DSA 1874-1. OpenVAS Vulnerability Test $Id: deb18741.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1874-1 nss Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-1874

Multiple cross-site scripting XSS vulnerabilities in the Management Console in Adobe JRun 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1874

CVE-2009-1874 : Adobe JRun 4.0 Management Console is affected by multiple XSS vulnerabilities. The references indicate that remote attackers can inject arbitrary web script or HTML via unspecified vectors in the Management Console. The NVD entry lists a base score of 4.3 (Medium) with Network att...