82 matches found
CVE-2021-2382
CVE-2021-2382 affects Oracle WebLogic Server (Oracle Fusion Middleware) in versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability, described across multiple sources, allows an unauthenticated attacker with network access via T3 or IIOP to compromise the server, ...
CVE-2018-2382
CVE-2018-2382 affects SAP Internet Graphics Server (versions 7.20, 7.20EXT, 7.45, 7.49, 7.53). The vulnerability enables a malicious user to store graphics in a controlled area and subsequently access information from the system area that would normally be unavailable. The connected documents pro...
CVE-2012-2382
CVE-2012-2382 entry is rejected/not used; references CVE-2011-1930 instead.
CVE-2017-2382
An issue was discovered in certain Apple products. macOS Server before 5.3 is affected. The issue involves the "Wiki Server" component. It allows remote attackers to enumerate user accounts via unspecified vectors...
CVE-2017-2382
CVE-2017-2382 affects macOS Server prior to 5.3, specifically the Wiki Server component. An unauthenticated attacker over the network could enumerate user accounts due to improper permissions checking, leading to information disclosure. Apple’s security content (macOS Server 5.3) indicates this w...
macOS : macOS Server < 5.3 Multiple Vulnerabilities
The version of macOS Server formerly known as Mac OS X Server installed on the remote host is prior to 5.3. It is, therefore, affected by the following vulnerabilities : - A denial of service vulnerability exists in the Apache HTTP server when handling a saturation of partial HTTP requests. An...
About the security content of macOS Server 5.3 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
Microsoft Windows Kernel-Mode Driver Privilege Elevation Vulnerabilities (3070102)
This host is missing an important security update according to Microsoft Bulletin MS15-073. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2015-2382
CVE-2015-2382 describes an information disclosure in Microsoft Windows where win32k.sys, the kernel-mode portion of Windows, can leak kernel memory contents to local users via a crafted application. Affected products include Windows 8, Windows 8.1, Windows Server 2012 (Gold and R2), and Windows R...
Microsoft Windows Kernel 'Win32k.sys' CVE-2015-2382 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to disclose kernel memory and obtain sensitive information that may aid in further attacks. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5...
MS15-073: Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (3070102)
The remote Windows host is affected by multiple vulnerabilities : - Multiple privilege escalation vulnerabilities exist in the Windows kernel-mode driver due to improper handling of objects in memory. A local attacker can exploit these vulnerabilities, with a specially crafted application, to...
Fedora Update for krb5 FEDORA-2015-2382
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-2382
The DfDiskLo.sys driver in Faronics Deep Freeze Standard and Enterprise 8.10 and earlier allows local administrators to cause a denial of service crash and execute arbitrary code via a crafted IOCTL request that writes to arbitrary memory locations, related to the IofCallDriver function...
CVE-2014-2382
The CVE-2014-2382 issue affects the DfDiskLo.sys driver in Faronics Deep Freeze Standard/Enterprise ≤8.10. A crafted IOCTL request allows writing to arbitrary memory via the IofCallDriver path, enabling local administrators to crash the system or execute arbitrary code with kernel-level privilege...
Ubuntu: Security Advisory (USN-2382-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-2382
CVE-2013-2382 affects Oracle Financial Services Software’s FLEXCUBE Direct Banking component, version 2.8.0 through 12.0.1. The vulnerability is described as an unspecified local-privilege issue that could allow a local user to impact confidentiality via vectors related to BASE. The initial descr...
MS11-057: Critical Cumulative Security Update for Internet Explorer (2559049)
The remote host is missing Internet Explorer IE Security Update 2559049. The installed version of IE is affected by several vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55787...
CVE-2011-2382
CVE-2011-2382 affects Microsoft Internet Explorer 8 and earlier, and IE9 beta, by failing to properly restrict cross-zone drag-and-drop actions. An attacker could entice a user to load a page containing an IFRAME with a file: URL to read cookies, effectively cookie hijacking. Vulnerable component...