SUSE: Security Advisory (SUSE-SU-2022:2379-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-2379

...

CentOS 8 : firefox (CESA-2020:2379)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2379 advisory. - Mozilla: Use-after-free in SharedWorkerService CVE-2020-12405 - Mozilla: JavaScript Type confusion with NativeTypes CVE-2020-12406 - Mozilla: Memory...

[SECURITY] [DLA 2379-3] mediawiki regression update

Debian LTS Advisory DLA-2379-3 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez November 21, 2020 https://wiki.debian.org/LTS Package : mediawiki Version : 1:1.27.7-1deb9u6 The update of mediawiki released as DLA-2379-2 contained a defect in the patch for...

Oracle Linux 8 : firefox (ELSA-2020-2379)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-2379 advisory. 68.9.0-1.0.1.el82 - Rebuild to pickup Oracle default bookmarks Orabug: 30069264 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

Privilege Escalation

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

CVE-2018-2379

CVE-2018-2379 affects SAP HANA Extended Application Services (EAS) 1.0. An unauthenticated user can determine if a given username is valid by inspecting error messages returned from a specific endpoint, enabling user-rename/account enumeration. The issue is limited to EAS 1.0 as described; no bro...

CVE-2018-2379

In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages of a specific endpoint...

Apple TV < 10.2 Multiple Vulnerabilities

According to its banner, the version of Apple TV on the remote device is prior to 10.2. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists in LibTIFF in the DumpModeEncode function within file tifdumpmode.c. An unauthenticated, remote attacker can exploi...

CVE-2017-2379

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Carbon" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2379

Consolidated from sources: CVE-2017-2379 affects Apple OS components using the Carbon font handling. The issue enables remote code execution or denial of service when processing a crafted .dfont file. Affected platforms include iOS prior to 10.3, macOS prior to 10.12.4, tvOS prior to 10.2, and wa...

CVE-2016-2379

The CVE-2016-2379 entry relates to Pidgin’s MXIT support, where passwords are encrypted with weak crypto. The described impact is that an attacker could decrypt hashed passwords by leveraging client registration codes or gain login access by eavesdropping on login messages and re-using the hashed...

Microsoft Office Word Viewer Memory Corruption Vulnerability (3072620)

This host is missing an important security update according to Microsoft Bulletin MS15-070. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-2379

CVE-2015-2379 affects Microsoft Office components (Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Word Viewer). The vulnerability is a memory corruption issue triggered by processing crafted Office documents, allowing remote attackers to execu...

Microsoft Office Memory Corruption (MS15-070: CVE-2015-2379)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

MS15-070: Vulnerability in Microsoft Office Could Allow Remote Code Execution (3072620)

The remote Mac OS X host has a version of Microsoft Excel installed that is affected by multiple remote code execution vulnerabilities due to improper handling of objects in memory. A remote attacker can exploit these vulnerabilities by convincing a user to open a specially crafted file, resultin...

MS15-070: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (3072620)

The remote Windows host has a version of Microsoft Office, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, SharePoint Server, or Microsoft Office Compatibility Pack installed that is affected by multiple vulnerabilities : - An ASLR bypass vulnerability exists in Microsoft Excel due to memo...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2379-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2379-1 advisory. Steven Vittitoe reported multiple stack buffer overflows in Linux kernel's magicmouse HID driver. A physically proximate attacker could exploit this flaw...

Oracle Linux 5 : squirrelmail (ELSA-2009-0010)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2009-0010 advisory. - Resolves: CVE-2008-2379 - Resolves: CVE-2008-3663, 468398 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

CVE-2013-2379

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 2.8.0 through 12.0.1 allows remote authenticated users to affect integrity via unknown vectors related to RT...