CVE-2014-0142

QEMU up to before 2.0.0 is affected by CVE-2014-0142. A local attacker can trigger a divide-by-zero in two code paths: the seek_to_sector driver (block/parallels.c) via a zero tracks value, or the bochs driver (block/bochs.c) via a zero extent_size, potentially crashing the guest. Remediation is ...

CVE-2014-0145

CVE-2014-0145 affects QEMU before 1.7.2 and 2.x before 2.0.0, allowing local users to crash or potentially execute code via buffer overflows in QCOW2 snapshot handling (qcow2_snapshot_load_tmp) or in DMG block handling. Exploitation requires local access; impact is a denial of service and possibl...

CVE-2014-9701

Cross-site scripting XSS vulnerability in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter to permalinkpage.php...

CVE-2014-6393

The Express web framework before 3.11 and 4.x before 4.5 for Node.js does not provide a charset field in HTTP Content-Type headers in 400 level responses, which might allow remote attackers to conduct cross-site scripting XSS attacks via characters in a non-standard encoding...

CVE-2014-6393

CVE-2014-6393 affects the Express web framework for Node.js (versions prior to 3.11 and 4.x prior to 4.5). Root cause: missing charset field in HTTP Content-Type headers for 400-level responses, enabling potential XSS via non-standard encodings. Affected component/file: Express’s Content-Type han...

CVE-2014-9701

CVE-2014-9701 affects MantisBT before 1.2.19 and in 1.3.x before 1.3.0-beta.2. The vulnerability is an XSS via the url parameter to permalink_page.php, enabling an attacker to inject arbitrary script/HTML. Affected components are the permalink_page handling in MantisBT; root cause is insufficient...

CVE-2014-5144

The CVE-2014-5144 entry describes a persistent XSS in Telescope prior to 0.9.3. An authenticated user can inject arbitrary web script or HTML via crafted markdown, with exploitation tied to parsing of markdown input and lack of sanitisation. Affected software: Telescope

CVE-2014-9701

Cross-site scripting XSS vulnerability in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter to permalinkpage.php...

Oracle Linux 7 : tomcat (ELSA-2017-2247)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2247 advisory. - Resolves: rhbz1459747 CVE-2017-5664 tomcat: Security constrained bypass in error page mechanism - Resolves: rhbz1441481 CVE-2017-5647 tomcat: Incorre...

Oracle Linux 7 : pidgin (ELSA-2017-1854)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-1854 advisory. - Add patch for CVE-2017-2640 Resolves: 1431022 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Microsoft SQL Server Information Disclosure Vulnerability (KB4036996)

This host is missing an important security update according to Microsoft KB4036996. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft SQL Server 2014 Information Disclosure Vulnerability (KB4032542)

This host is missing an important security update according to Microsoft KB4032542. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Oracle Linux 7 : git (ELSA-2017-2004)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2004 advisory. - dissalow repo names beginning with dash Resolves: CVE-2017-8386 - do not put unsanitized branch names in Resolves: CVE-2014-9938 Tenable has extracte...

Microsoft SQL Server Information Disclosure Vulnerability (KB4019091)

This host is missing an important security update according to Microsoft KB4019091. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft SQL Server 2014 Information Disclosure Vulnerability (KB4032542)

Microsoft SQL Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft SQL Server Information Disclosure Vulnerability (KB4036996)

Microsoft SQL Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft SQL Server 2014 Information Disclosure Vulnerability (KB4019093)

This host is missing an important security update according to Microsoft KB4019093. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

CVE-2017-8516

Microsoft SQL Server Analysis Services in Microsoft SQL Server 2012, Microsoft SQL Server 2014, and Microsoft SQL Server 2016 allows an information disclosure vulnerability when it improperly enforces permissions, aka "Microsoft SQL Server Analysis Services Information Disclosure Vulnerability"...

KB4036996 - Description of the security update for SQL Server 2014 Service Pack 2 CU: August 8, 2017

KB4036996 - Description of the security update for SQL Server 2014 Service Pack 2 CU: August 8, 2017 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to exploit the vulnerability if the attacker's credentials allow acces...

KB4019093 - Description of the security update for SQL Server 2014 Service Pack 2 GDR: August 8, 2017

KB4019093 - Description of the security update for SQL Server 2014 Service Pack 2 GDR: August 8, 2017 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to exploit the vulnerability if the attacker's credentials allow acce...