Oracle VirtualBox Security Updates (cpujan2021) - Windows

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Vulnerabilities fixed in Oracle Virtualization

Vulnerabilities have been fixed in Oracle Virtualization/Virtualbox. The vulnerabilities allow a malicious person to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data...

CVE-2021-2124

creationtimestamp| type| source ---|---|--- 2021-01-20 18:33:33+00:00| seen| https://t.me/cibsecurity/22365...

CVE-2021-2124

The CVE-2021-2124 vulnerability affects Oracle VM VirtualBox (Core) and is exploitable on a host where VirtualBox runs. Affected versions are prior to 6.1.18; the issue enables a high-privilege attacker who can log into the infrastructure to compromise VirtualBox, potentially causing a hang or a ...

CVE-2019-2124

In ComposeActivityEmailExternal of ComposeActivityEmailExternal.java in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is a possible way to silently attach files to an email due to a confused deputy. This could lead to local information disclosure...

CVE-2019-2124

CVE-2019-2124 affects Android 7.1.1–9 in ComposeActivityEmailExternal.py (ComposeActivityEmailExternal.java). A confused deputy could silently attach files to an email, enabling local information disclosure. Affected: Android 7.1.1, 7.1.2, 8.0, 8.1, 9. Exploitation: local. Remediation: apply patc...

GE ST-2124 RSTi Slice, 4 Points Detection

Binary data 755584.prm...

CVE-2018-2124

CVE-2018-2124 entry is rejected and not used; it does not represent an active vulnerability.

CVE-2018-2124

...

CVE-2017-2124

Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php...

CVE-2017-2124

The CVE-2017-2124 entry affects OneThird CMS v1.73 Heaven’s Door and earlier. A cross-site scripting vulnerability exists in contact.php, allowing remote attackers to inject arbitrary web script or HTML via a crafted inquiry form submission. The root cause is improper handling in the inquiry form...

CentOS Update for kernel CESA-2016:2124 centos5

Check the version of kernel SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882585";...

RedHat Update for kernel RHSA-2016:2124-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 : kernel (ELSA-2016-2124)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-2124 advisory. - mm Fix Privilege escalation via MAPPRIVATE Larry Woodman 1385112 CVE-2016-5195 Tenable has extracted the preceding description block directly from th...

Oracle Linux 5 : kernel (ELSA-2016-2124-1)

The remote Oracle Linux host is missing a security update for the kernel packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from Oracle Linux Security Advisory ELSA-2016-2124-1. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Oracle: Security Advisory (ELSA-2013-0126)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2124

Unspecified vulnerability in Easy Setup Wizard in HP ThinPro Linux 4.1 through 5.1 and Smart Zero Core 4.3 and 4.4 allows local users to bypass intended access restrictions and gain privileges via unknown vectors...

CVE-2015-2124

CVE-2015-2124 is a local privilege-escalation vulnerability in HP ThinPro Linux (4.1–5.1) and HP Smart Zero Core (4.3–4.4) triggered by the HP Easy Setup Wizard. The affected components are the Easy Setup Wizard and the vulnerability enables local users to bypass access restrictions and gain priv...

Adobe Shockwave Player <= 11.5.9.620 (APSB11-17) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.5.9.620 or earlier. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption vulnerabilities affect the 'Dirapi.dll' component that can result in arbitrary code execution. CVE-2011-0317,...

CVE-2013-2124

CVE-2013-2124 is a double-free vulnerability in LibguestFS’s inspect-fs.c that affects LibguestFS 1.20.x (before 1.20.7), 1.21.x, 1.22.0, and 1.23.0. The issue allows remote attackers to cause a denial of service (crash) via empty guest files. The connected documents do not provide a confirmed ex...