Huawei EulerOS: Security Advisory for libsolv (EulerOS-SA-2019-2033)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : patch (RHSA-2019:2033)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2033 advisory. The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes...

CVE-2019-2033

CVE-2019-2033 affects Android 9; the issue is in dnssd_clientstub.c: create_hdr exposes a use-after-free, enabling local privilege escalation with no extra privileges and no user interaction needed. The Android bulletin lists this under the System component as CVE-2019-2033 with Elevation of Priv...

CVE-2018-2033

...

CVE-2018-2033

CVE-2018-2033 entry is rejected/not used; this candidate should not be considered an active vulnerability entry.

CVE-2017-2033

...

CVE-2017-2033

CVE-2017-2033 is rejected; this entry does not represent an active vulnerability.

Jenkins CSRF And XSS Vulnerabilities - Windows

Jenkins is prone to cross-site request forgery CSRF and cross- site scripting vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Oracle: Security Advisory (ELSA-2011-2033)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2033

CVE-2015-2033 concerns Infoblox Network Automation NetMRI’s Anyterm Daemon, vulnerable before NETMRI-23483. A remote attacker can send a crafted terminal/anyterm-module request to achieve arbitrary command execution with root privileges. The vulnerability stems from how the Anyterm Daemon handles...

Adobe Shockwave Player <= 11.6.4.634 Multiple Memory Corruption Vulnerabilities (APSB12-13) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.6.4.634 or earlier. It is, therefore, affected by multiple unspecified memory corruption vulnerabilities. A remote attacker can exploit these issues by tricking a user into viewing a malicious Shockwave file, resulti...

CVE-2013-2033

CVE-2013-2033 affects Jenkins before 1.514, Jenkins LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1/1.480.x before 1.480.4.1. The vulnerability is a cross-site scripting (XSS) issue that allows remote authenticated users with write permission to inject arbitrary web script or HTML vi...

USN-2124-2: OpenJDK 6 regression

USN-2124-1 fixed vulnerabilities in OpenJDK 6. Due to an upstream regression, memory was not properly zeroed under certain circumstances which could lead to instability. This update fixes the problem. We apologize for the inconvenience. Original advisory details: A vulnerability was discovered in...

CVE-2014-2033

The CVE-2014-2033 issue affects Blue Coat ProxySG SGOS caching. The vulnerability allows remote authenticated users to bypass access controls in a time window after account deletion or modification by abusing knowledge of previously valid credentials. Affected software includes ProxySG SGOS versi...

Ubuntu 10.04 LTS / 12.04 LTS : openjdk-6 vulnerabilities (USN-2124-1)

A vulnerability was discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit this to expose sensitive data over the network. CVE-2014-0411 Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data...

USN-2124-1: OpenJDK 6 vulnerabilities

A vulnerability was discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit this to expose sensitive data over the network. CVE-2014-0411 Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2033)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2033 advisory. - ipv6: make fragment identifications less predictable Joe Jin CVE-2011-2699 - vlan: fix panic when handling priority tagged frames Joe Jin...

FreeBSD : jenkins -- multiple vulnerabilities (622e14b1-b40c-11e2-8441-00e0814cab4e)

Jenkins Security Advisory reports : This advisory announces multiple security vulnerabilities that were found in Jenkins core. - SECURITY-63 / CVE-2013-2034 This creates a cross-site request forgery CSRF vulnerability on Jenkins master, where an anonymous attacker can trick an administrator to...

jenkins -- multiple vulnerabilities

Jenkins Security Advisory reports: This advisory announces multiple security vulnerabilities that were found in Jenkins core. SECURITY-63 / CVE-2013-2034 This creates a cross-site request forgery CSRF vulnerability on Jenkins master, where an anonymous attacker can trick an administrator to execu...

Memory corruption

Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2029, CVE-2012-2030, CVE-2012-2031, and CVE-2012-2033...