91 matches found
Fingerprint Validity Driver and Synaptics Fingerprint Driver Information Disclosure - Lenovo Support US
No description provided...
CVE-2016-2393
Lenovo Fingerprint Manager before 8.01.57 and Lenovo Touch Fingerprint before 1.00.08 expose a privilege-escalation flaw due to weak ACLs on certain services and files, enabling local attackers to bypass checks. Affected software: Fingerprint Manager (<8.01.57) and Touch Fingerprint (
Oracle: Security Advisory (ELSA-2015-2393)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-2393-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : Wget vulnerability (USN-2393-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2393-1 advisory. HD Moore discovered that Wget contained a path traversal vulnerability when downloading symlinks using FTP. A malicious remote FTP server or a man in the middle...
openSUSE Security Update : wireshark (openSUSE-SU-2012:0657-1)
This update is a maintenance release of Wireshark. It fixes some vulererabilities when dissecting certain protocols. As packages for these protocols may be received over the network, an attacker may trigger infinite or large loops or crashes of the dissector. Wireshark release notes and advisorie...
Open-Xchange Security Advisory 2014-04-08
Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Vulnerability type: Information exposure CWE-200 Vulnerable version: 7.4.2 and earlier Vulnerable component: frontend Fixed version: 7.4.2-rev13, 7.4.1-rev11, 7.2.2-rev20 Report confidence: Confirmed Solution status: Fixed by Vendor Vendor...
CVE-2014-2393
Open-Xchange AppSuite is affected by CVE-2014-2393, a Drive attachment filename XSS in the composer. Vulnerable in Open-Xchange AppSuite 7.4.1 before rev11 and 7.4.2 before rev13; fixed in 7.4.2-rev13, 7.4.1-rev11, and 7.2.2-rev20 per Open-Xchange advisory. The issue arises from insufficient vali...
Open-Xchange AppSuite Drive组件Email附件文件名存储型跨站脚本漏洞
CVE ID:CVE-2014-2393 OX App Suite是一个集成云环境,可以帮助用户在任何设备上管理他们的电子邮件、任务、日程安排、文档等。 由于应用程序没有正确校验Drive组件中的Email附件的文件名,允许远程攻击者利用漏洞注入恶意脚本或HTML代码,当恶意数据被查看时,可获取敏感信息或劫持用户会话。 0 Open-Xchange AppSuite 7.4.2 Open-Xchange AppSuite 7.4.1 OX App Suite 7.4.2-rev13, 7.4.1-rev11, 7.2.2-rev20版本已修复该漏洞,建议用户下载使用:...
CVE-2013-2393
CVE-2013-2393 concerns an unspecified vulnerability in the Oracle Outside In Technology component used by Oracle Fusion Middleware versions 8.3.7 and 8.4.0, with impact stated as availability via issues related to Outside In Filters. The connected documents confirm this CVE is associated with Ora...
Fedora Update for wireshark FEDORA-2012-10175
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for wireshark FEDORA-2012-10175
Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2012-10175 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Fedora 16 : wireshark-1.6.8-1.fc16 (2012-10175)
Update to latest upstream release, fixing few security bugs. CVE-2012-2392: Infinite and large loops in ANSI MAP, ASF, IEEE 802.11, IEEE 802.3, and LTP dissectors. CVE-2012-2393: Memory allocation flaw in the DIAMETER dissector. CVE-2012-2394: Denial of service crash due memory alignment problem ...
Wireshark Multiple Denial of Service Vulnerabilities (Jul 2012) - Mac OS X
Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Wireshark Multiple Denial of Service Vulnerabilities (Jul 2012) - Windows
Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2012-2393
epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures, which allows remote attackers to cause a denial of service application crash via a crafted packet that triggers incorrect...
CVE-2012-2393
CVE-2012-2393: In Wireshark, the DIAMETER dissector epan/dissectors/packet-diameter.c may allocate memory incorrectly, enabling a remote attacker to crash the application via a crafted Diameter packet. Affected line: Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8. Mitigation: upgrade to fix...
SuSE 10 Security Update : wireshark (ZYPP Patch Number 8168)
This version upgrade of wireshark fixes multiple denial of service flaws : - denial of service via memory alignment flaw. CVE-2012-2394 - DIAMETER memory allocation flaw. CVE-2012-2393 - denial of service in multiple dissectors / parsers Additionally, various other non-security bug fixes have bee...
CVE-2012-2393
creationtimestamp| type| source ---|---|--- 2012-05-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18918...
CVE-2011-2393
The CVE-2011-2393 entry concerns the IPv6 Neighbor Discovery implementation in BSD-derived stacks (FreeBSD, NetBSD, and possibly others) where processing of Router Advertisement messages from multiple source addresses can exhaust CPU and cause device hang, constituting a remote denial of service ...