Lucene search
+L

99 matches found

NVD
NVD
added 2012/05/29 8:55 p.m.30 views

CVE-2012-1987

Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to 1 cause a denial of service memory consumption via a REST request to a stream tha...

3.5CVSS6.2AI score0.02553EPSS
SaveExploits0References19
Cvelist
Cvelist
added 2012/05/29 8:00 p.m.39 views

CVE-2012-1987

Unspecified vulnerability in Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys to 1 cause a denial of service memory consumption via a REST request to a stream tha...

6.1AI score0.02553EPSS
SaveExploits0References19
CVE
CVE
added 2012/05/29 8:00 p.m.106 views

CVE-2012-1987

CVE-2012-1987 affects Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, plus Puppet Enterprise (PE) Users 1.0–2.5.x before 2.5.1. The vulnerability allows remote authenticated users with agent SSL keys to cause denial of service in two ways: (1) memory exhaustion via a REST request to a stream ...

3.5CVSS6.2AI score0.02553EPSS
SaveExploits0References19Affected Software2
OpenVAS
OpenVAS
added 2012/04/30 12:00 a.m.36 views

Debian: Security Advisory (DSA-2453-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.4AI score0.03179EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2012/04/30 12:00 a.m.39 views

Fedora Update for puppet FEDORA-2012-5999

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.9CVSS6.8AI score0.02632EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2012/04/30 12:00 a.m.33 views

Fedora Update for puppet FEDORA-2012-6055

Check for the Version of puppet OpenVAS Vulnerability Test Fedora Update for puppet FEDORA-2012-6055 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

6.9CVSS0.1AI score0.02632EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2012/04/30 12:00 a.m.34 views

Fedora 16 : puppet-2.6.16-1.fc16 (2012-5999)

This update fixes several security issues recently found in puppet related to filebucket functionality. For full details, refer to the upstream release notes : http://projects.puppetlabs.com/projects/1/wiki/ReleaseNotes2.6.15 Note that Tenable Network Security has extracted the preceding...

6CVSS5.3AI score0.02632EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2012/04/30 12:00 a.m.36 views

Fedora 15 : puppet-2.6.16-1.fc15 (2012-6055)

This update fixes several security issues recently found in puppet related to filebucket functionality. For full details, refer to the upstream release notes : http://projects.puppetlabs.com/projects/1/wiki/ReleaseNotes2.6.15 Note that Tenable Network Security has extracted the preceding...

6CVSS5.3AI score0.02632EPSS
SaveExploits0References8
OpenVAS
OpenVAS
added 2012/04/30 12:00 a.m.27 views

Debian: Security Advisory (DSA-2451-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6CVSS6.4AI score0.02632EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2012/04/30 12:00 a.m.32 views

Debian: Security Advisory (DSA-2453-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.6AI score0.03179EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2012/04/30 12:00 a.m.35 views

FreeBSD Ports: puppet

The remote host is missing an update to the system as announced in the referenced advisory. VID 607d2108-a0e4-423a-bf78-846f2a8f01b0 OpenVAS Vulnerability Test $ Description: Auto generated from VID 607d2108-a0e4-423a-bf78-846f2a8f01b0 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

6CVSS6.3AI score0.02632EPSS
SaveExploits0
OSV
OSV
added 2012/04/19 12:00 a.m.30 views

DSA-2453-2 gajim - regression

Bulletin has no description...

7.5CVSS5.3AI score0.03179EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2012/04/17 12:00 a.m.29 views

Debian DSA-2453-1 : gajim - several vulnerabilities

Several vulnerabilities have been discovered in Gajim, a feature-rich Jabber client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-1987 Gajim is not properly sanitizing input before passing it to shell commands. An attacker can use this flaw to...

7.5CVSS6.5AI score0.03179EPSS
SaveExploits2References9
Debian
Debian
added 2012/04/13 4:52 a.m.76 views

[SECURITY] [DSA 2451-1] puppet security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2451-1 [email protected] http://www.debian.org/security/ Nico Golde April 13, 2012 http://www.debian.org/security/faq -...

6CVSS7.2AI score0.02632EPSS
SaveExploits0
Ubuntu
Ubuntu
added 2012/04/11 5:43 a.m.64 views

USN-1419-1: Puppet vulnerabilities

It was discovered that Puppet used a predictable filename when downloading Mac OS X package files. A local attacker could exploit this to overwrite arbitrary files. CVE-2012-1906 It was discovered that Puppet incorrectly handled filebucket retrieval requests. A local attacker could exploit this t...

6CVSS5.9AI score0.02632EPSS
SaveExploits0
securityvulns
securityvulns
added 2011/09/16 12:00 a.m.96 views

iDefense Security Advisory 09.13.11: Microsoft Excel Record Integer Signedness Vulnerability

iDefense Security Advisory 09.13.11 http://labs.idefense.com/intelligence/vulnerabilities/ Sep 13, 2011 I. BACKGROUND Excel is the spreadsheet application included with Microsoft Corp.'s Office productivity software suite. More information is available at the following website:...

9.3CVSS0.3AI score0.20486EPSS
SaveExploits1
CVE
CVE
added 2011/09/15 10:00 a.m.76 views

CVE-2011-1987

CVE-2011-1987 covers an out-of-bounds/integer-signing issue in Microsoft Excel and related Office components (Excel 2003 SP3, 2007 SP2, 2010 SP1, Office for Mac, Open XML Converter, Excel Viewer, and Office Compatibility Pack). The root cause is an array indexing vulnerability triggered by a craf...

9.3CVSS7.5AI score0.20486EPSS
SaveExploits1References3Affected Software5
seebug.org
seebug.org
added 2011/09/15 12:00 a.m.46 views

Microsoft Excel数组索引远程代码执行漏洞(MS11-072)

BUGTRAQ ID: 49477 CVECAN ID: CVE-2011-1987 Microsoft Excel是由Microsoft为Windows和Apple Macintosh操作系统的电脑而编写和运行的一款试算表软件。 Microsoft Excel在处理特制Excel文件时存在远程代码执行漏洞,远程攻击者可利用此漏洞以当前用户权限执行任意代码,可能造成拒绝服务。...

9.3CVSS6.9AI score0.20486EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
added 2011/09/13 12:00 a.m.25 views

Microsoft Excel Out of Bounds Array Indexing Code Execution (MS11-072; CVE-2011-1987)

A remote code execution vulnerability has been reported in Microsoft Office Excel. An attacker could exploit this vulnerability to execute arbitrary code in an affected system. The vulnerability is due to an error in the way the application handles specially crafted Excel files. A remote attacker...

9.3CVSS7.5AI score0.20486EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
added 2011/04/27 12:00 a.m.24 views

Microsoft Collaboration Data Objects Buffer Overflow (MS05-048; CVE-2005-1987)

Microsoft Collaboration Data Objects CDO are a set of COM objects made for the IIS SMTP service and Exchange servers that provide the ability to build messaging and collaboration applications. A buffer overflow vulnerability exists in Microsoft Collaboration Data Objects. The vulnerability is...

7.5CVSS6.5AI score0.44499EPSS
SaveExploits0
Rows per page
Query Builder