304 matches found
USN-4286-2: Linux kernel (Xenial HWE) vulnerabilities
USN-4286-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 ESM. It was discovered that the Linux kernel did not properly clear data structures on...
USN-4286-1: Linux kernel vulnerabilities
It was discovered that the Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors. A local attacker could use this to expose sensitive information. CVE-2019-14615 It was discovered that a race condition existed in the Softmac USB Prism54 devi...
Ubuntu 18.04 LTS : Linux kernel (HWE) vulnerabilities (USN-4225-2)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4225-2 advisory. USN-4225-1 fixed vulnerabilities in the Linux kernel for Ubuntu 19.10. This update provides the corresponding updates for the Linux Hardware Enablement H...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4225-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4225-1 advisory. It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could use...
RHEL 7 : perl (RHSA-2019:2400)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2400 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Intege...
Oracle E-Business Multiple Vulnerabilities (Jan 2019 CPU)
The version of Oracle E-Business installed on the remote host is missing the January 2019 Oracle Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the January 2019 Critical Patch Update advisory : - Oracle CRM Technical Foundation Messages component is...
CVE-2019-2400
Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: User Registration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with networ...
CVE-2019-2400
Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: User Registration. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with networ...
CVE-2019-2400
CVE-2019-2400 affects Oracle E-Business Suite, specifically the Oracle iStore User Registration subcomponent. Affected versions include 12.1.1–12.2.8. The vulnerability is exploitable by an unauthenticated attacker who can reach Oracle iStore over HTTP; however, user interaction is required for e...
CVE-2018-2400
CVE-2018-2400 affects SAP Business Process Automation (BPA) by Redwood, versions 9.00 and 9.10. According to sources, an attacker could access information that should be restricted. The vulnerability is described in multiple records (NVD, CNVD) as an information disclosure issue; exploitation det...
CVE-2018-2400
creationtimestamp| type| source ---|---|--- 2018-03-14 04:18:24+00:00| seen| https://t.me/informationsecuritychannel/14206...
CVE-2015-3976
Cross-site scripting XSS vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier...
CVE-2015-2400
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-2400
CVE-2017-2400 relates to Apple iOS SafariViewController where cache state is not properly kept in sync with Safari when the user clears Safari cache. Affected: iOS versions before 10.3. Root cause: incorrect synchronization of Safari cache clearing between Safari and SafariViewController. Impact:...
AXIS 2400+ Blade Video Server /view/view.shtml 越权访问漏洞
No description provided by source...
Chess Strategy (1800-2400) - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Chess Strategy 1800-2400 published at the 'play' market has multiple vulnerabilities...
Ubuntu: Security Advisory (USN-2400-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
F5 Networks BIG-IP : SSH vulnerability (K13600)
A platform-specific remote access vulnerability has been discovered that may allow a remote user to gain privileged access to affected systems using secure shell SSH. The vulnerability is caused by a configuration error, and is not the result of an underlying SSH defect. The following platforms a...
Endeca Latitude 2.2.2 Cross Site Scripting
Advisory: Endeca Latitude Cross-Site Scripting RedTeam Pentesting discovered a Cross-Site Scripting XSS vulnerability in Endeca Latitude. By exploiting this vulnerability an attacker is able to execute arbitrary JavaScript code in the context of other Endeca Latitude users. Details ======= Produc...