Juniper Junos sendmsg Local Privilege Escalation (JSA10797)

According to its self-reported version number, the remote Juniper Junos device is affected by a heap-based buffer overflow condition in the sendmsg system call, specifically due to incorrect handling of arguments in the sockargs function in sys/kern/uipcsyscalls.c. A local attacker can exploit th...

Juniper Networks Junos OS DoS Vulnerability

Junos OS is prone to a denial of service vulnerability in sendmsg. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"...

birdseyeviews.org XSS vulnerability

Vulnerable URL: http://www.birdseyeviews.org/zoom.php?city=Austin=1887info=1"...

SOL47009044 - FreeBSD vulnerability CVE-2016-1887

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

CVE-2016-1887

Integer signedness error in the sockargs function in sys/kern/uipcsyscalls.c in FreeBSD 10.1 before p34, 10.2 before p17, and 10.3 before p3 allows local users to cause a denial of service memory overwrite and kernel panic or gain privileges via a negative buflen argument, which triggers a...

CVE-2016-1887

CVE-2016-1887 is a vulnerability in FreeBSD where an integer signedness error in sockargs (sys/kern/uipc_syscalls.c) affects FreeBSD 10.1 before p34, 10.2 before p17, and 10.3 before p3. The underlying cause is a signedness issue in buflen handling, enabling a local attacker to trigger a heap-bas...

FreeBSD-SA-16:19.sendmsg

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-16:19.sendmsg Security Advisory The FreeBSD Project Topic: Incorrect argument handling in sendmsg2 Category: core Module: kernel Announced: 2016-05-17 Credits:...

CVE-2015-1887

CVE-2015-1887 affects IBM WebSphere Portal: information disclosure of JCR data via a crafted request due to improper access control on the JCR component. A remote, unauthenticated attacker could obtain sensitive information from the Java Content Repository. Affected versions per sources: WebSpher...

IBM WebSphere Portal JCR Information Disclosure (PI36150)

The version of IBM WebSphere Portal installed on the remote Windows host is affected by an information disclosure vulnerability due to improper access control enforcement of the JCR component. A remote, unauthenticated attacker, using a specially crafted request, can exploit this to gain access t...

Microsoft Excel SST Invalid Length Use After Free - Ver2 (CVE-2012-1887)

A use-after-free vulnerability has been reported in Microsoft Office Excel. The vulnerability is due to an error in Microsoft Excel while handling specially crafted Excel files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected...

DrinkedIn BarFinder application安全绕过任意Javascript代码执行漏洞

CVE ID:CVE-2014-1887 DrinkedIn BarFinder application是一款基于安卓的应用。 当使用Adobe PhoneGap 2.9.0或之前版本时DrinkedIn BarFinder application存在安全漏洞，允许远程攻击者控制类似freelifetimecheating.com和www.babesroulette.com之类的站点，来执行任意JavaScript代码，获取地理信息。 0 DrinkedIn BarFinder application for Android 目前没有详细解决方案提供：...

CVE-2014-1887

The DrinkedIn BarFinder application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently obtain sensitive fine-geolocation information, by leveraging control over one of a number of adult sites, as demonstrated b...

CVE-2014-1887

The CVE concerns the DrinkedIn BarFinder Android app when used with Adobe PhoneGap 2.9.0 or earlier. The underlying issue allows a remote attacker to execute arbitrary JavaScript by exploiting control over certain adult sites (e.g., freelifetimecheating.com and www.babesroulette.com), which in tu...

Oracle Linux 3 : net-snmp (ELSA-2009-1124)

From Red Hat Security Advisory 2009:1124 : Updated net-snmp packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Simple Network Management Protocol SNMP is a...

Oracle Linux 5 : python (ELSA-2009-1176)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1176 advisory. - Multiple integer overflows in python core CVE-2008-2315 - PyStringFromStringAndSize does not check for negative size values CVE-2008-1887 - Multiple...

Oracle Linux 4 : python (ELSA-2009-1177)

From Red Hat Security Advisory 2009:1177 : Updated python packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive,...

Oracle Linux 3 : python (ELSA-2009-1178)

From Red Hat Security Advisory 2009:1178 : Updated python packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Python is an interpreted, interactive,...

Ubuntu Update for swift USN-1887-1

Check for the Version of swift OpenVAS Vulnerability Test $Id: gbubuntuUSN18871.nasl 8494 2018-01-23 06:57:55Z teissa $ Ubuntu Update for swift USN-1887-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Ubuntu: Security Advisory (USN-1887-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1887

Multiple cross-site scripting XSS vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view configuration fields...