Microsoft Windows TrueType Fonts CVE-2015-2455 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft .NET...

MS15-084: Description of the security update for Windows XML core services: August 11, 2015

None None...

MS15-086: Security update for Update Rollup 8 for System Center 2012 Operations Manager: August 11, 2015

Describes the issues that are fixed in Update Rollup 8 for Microsoft System Center 2012 Operations Manager.IntroductionThis article describes the issues that are fixed in Update Rollup 8 for Microsoft System Center 2012 Operations Manager. Additionally, this article contains the installation...

Microsoft XML Core Services CVE-2015-2434 Man in the Middle Information Disclosure Vulnerability

Description Microsoft XML Core Services is prone to an information-disclosure vulnerability. Attackers can exploit this issue to disclose potentially sensitive information through man-in-the-middle attacks. Technologies Affected Microsoft Office 2007 SP2 Microsoft Windows 7 for 32-bit Systems SP1...

Microsoft .NET Framework CVE-2015-2480 Privilege Escalation Vulnerability

Description Microsoft .NET Framework is prone to a privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges in the context of the currently logged-in user; this can also result in the attacker gaining complete control of the affected system. Technologies...

CVE-2012-6694

CVE-2012-6694 involves GE Healthcare Centricity PACS Workstation 4.0/4.0.1 and Centricity PACS Server 4.0 where the geservice account uses the default/hard-coded password 2charGE. This credential issue is associated with potential unauthorized access and remote exploitation, as documented in ICS-...

CVE-2012-6693

CVE-2012-6693 concerns GE Healthcare Centricity PACS Server with default credentials: nasro / nasro (ReadOnly) and nasrw (Read/Write). The connected documents confirm a default credential issue across Centricity PACS components, enabling remote access with these accounts. The primary root cause i...

CVE-2012-6695

GE Healthcare Centricity PACS Workstation 4.0/4.0.1 uses a ddpadmin password for the ddpadmin user. The connected ICS advisory characterizes this as default or hard-coded credentials (CWE-287) with potential remote authentication bypass. Exploitation could allow remote access to affected devices,...

CVE-2012-6660

GE Healthcare Precision MP/i is affected by a vulnerability (CVE-2012-6660) due to default or hard-coded credentials for multiple accounts: serviceapp uses the orion password, clinical operator uses orion, and administrator uses PlatinumOne. The ICS advisory (GE Healthcare vulnerability) confirms...

Scientific Linux Security Update : grep on SL6.x i386/x86_64 (20150722)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way grep parsed large lines of data. An attacker able to trick a user into running grep on a specially crafted data file could use this flaw to crash grep or, potentially, execute arbitrary code with the privilege...

Ubuntu: Security Advisory (USN-2693-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : grep (ELSA-2015-1447)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2015-1447 advisory. - Fixed buffer overrun for grep -F Resolves: CVE-2015-1345 Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Ubuntu 14.04 LTS : Bind vulnerabilities (USN-2693-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2693-1 advisory. Jonathan Foote discovered that Bind incorrectly handled certain TKEY queries. A remote attacker could use this issue with a specially crafted packet to...

CentOS 6 : grep (CESA-2015:1447)

Updated grep packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

grep security update

CentOS Errata and Security Advisory CESA-2015:1447 Updated grep packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Low security impact. Common Vulnerability...

Windows Server 2012 Detection

Binary data 8692.prm...

RedHat Update for pki-core RHSA-2015:1347-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : grep (RHSA-2015:1447)

Updated grep packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

RedHat Update for grep RHSA-2015:1447-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 6 : pki-core (RHSA-2015:1347)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1347 advisory. Red Hat Certificate System is an enterprise software system designed to manage enterprise public key infrastructure PKI deployments. PKI Core contain...