CVE-2020-1985

Incorrect Default Permissions on C:\Programdata\Secdo\Logs folder in Secdo allows local authenticated users to overwrite system files and gain escalated privileges. This issue affects all versions Secdo for Windows. Recent assessments: xFreed0m at April 10, 2020 3:06pm UTC reported: CVE-2020-1985...

Debian DLA-1985-1 : djvulibre security update

It was discovered that there was a NULL pointer dereference issue in the IW44 encoder/decoder within DjVu, a set of compression technologies for high-resolution ssues. For Debian 8 'Jessie', this issue has been fixed in djvulibre version 3.5.25.4-4+deb8u2. We recommend that you upgrade your...

CVE-2019-1985

In findAvailSpellCheckerLocked of TextServicesManagerService.java, there is a possible way to bypass the warning dialog when selecting an untrusted spell checker due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2019-1985

CVE-2019-1985 affects Android Framework: In TextServicesManagerService.findAvailSpellCheckerLocked, there is a permissions bypass that can bypass the warning dialog when selecting an untrusted spell checker. This could allow local elevation of privilege with no additional privileges and without u...

Security Bulletin: IBM MQ Appliance potential access to queue manager private keys (CVE-2015-1985)

Summary There is potential for malicious users to access IBM MQ Appliance queue manager private keys without requiring knowledge of the password. Vulnerability Details CVEID: CVE-2015-1985 DESCRIPTION: IBM MQ Appliance M2000 could allow a malicious user with read authority to copied key repositor...

CVE-2017-1985

CVE-2017-1985 entry is rejected/not used and does not represent an active vulnerability per the description.

CVE-2017-1985

...

RedHat Update for thunderbird RHSA-2016:1985-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for thunderbird CESA-2016:1985 centos7

Check the version of thunderbird SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882572";...

Oracle Linux 5 / 6 / 7 : thunderbird (ELSA-2016-1985)

The remote Oracle Linux 5 / 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2016-1985 advisory. 45.4.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 45.4.0-1 - Update to 45.4.0 Tenable has extracted t...

HP Operations Manager for Windows 8.x and 9.0 Java Object Deserialization RCE

The version of HP Operations Manager installed on the remote host has the Sam Admin Adapter installed. This package is no longer supported by HP and is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collectio...

CVE-2016-1985

CVE-2016-1985 affects HPE Operations Manager 8.x and 9.0 on Windows. The vulnerability is due to unsafe deserialization of crafted Java objects via Apache Commons Collections, enabling remote code execution when processing a crafted serialized payload (e.g., via SOAP). The CVSS metrics in the pro...

CVE-2015-1985

Affected product: IBM MQ Appliance M2000. Vulnerability: local attacker with read authority can bypass password and read private keys by exploiting the stash file in versions prior to 8.0.0.4. Root cause: stash-file presence enabling unauthorized access to key material. Impact: potential exposure...

Oracle: Security Advisory (ELSA-2014-1985)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 : bind97 (ELSA-2014-1985)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-1985 advisory. 32:9.7.0-21.P2.1 - Fix CVE-2014-8500 1171972 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Amazon Linux AMI : libX11 / libXcursor,libXfixes,libXi,libXrandr,libXrender,libXres,libXt,libXv,libXvMC,libXxf86dga,libXxf86vm,libdmx,xorg-x11-proto-devel (ALAS-2014-452)

Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws to potentially...

CentOS 6 : libX11 / libXcursor / libXext / libXfixes / libXi / libXinerama / libXp / libXrandr / etc (CESA-2014:1436)

Updated X11 client libraries packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...

openSUSE Security Update : libXinerama (openSUSE-SU-2013:1026-1)

This update of libXinerama fixes an integer overflow issue. - U0001-integer-overflow-in-XineramaQueryScreens-CVE-2013 -19.patch - integer overflow in XineramaQueryScreens CVE-2013-1985 bnc821663, bnc815451 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

CVE-2014-1985

Open redirect vulnerability in the redirectbackordefault function in app/controllers/applicationcontroller.rb in Redmine before 2.4.5 and 2.5.x before 2.5.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the back url backurl parameter...

CVE-2014-1985

Open redirect vulnerability in Redmine’s redirect_back_or_default (app/controllers/application_controller.rb) allows attackers to send users to arbitrary sites via the back_url parameter. Affected versions: Redmine before 2.4.5 and 2.5.x before 2.5.1. Impact includes potential phishing by redirec...