CVE-2018-2408

SAP Business Objects (BI Launch Pad/CMC) versions 4.0–4.30 are affected by an improper session management vulnerability where, after a user changes their password, other active sessions created with the old password remain active. This can allow an attacker to reuse pre-existing sessions to acces...

CVE-2005-2408

...

CVE-2005-2408

This CVE-2005-2408 entry is rejected/not used per the Initial Description.

CVE-2017-2408

CVE-2017-2408 affects macOS Sierra (before 10.12.4) and targets the IOATAFamily kernel component. The issue is a memory corruption vulnerability that could allow a crafted application to execute arbitrary code in kernel context or cause a denial of service. Exploitation is described as a local is...

CVE-2016-2408

Pulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for Windows allow restricted users to gain privileges via unspecified vectors...

CVE-2016-2408

CVE-2016-2408 is a client‑side elevation of privilege in Pulse Secure components on Windows. Concrete details from connected docs show exploitable to restricted users via the Pulse Secure Desktop Client and the Standalone Installer Service, with affected versions including: Pulse Secure Desktop C...

caranddriver.com XSS vulnerability

Vulnerable URL: http://www.caranddriver.com/search/reviews/hword='"onmouseover="alert'XSSPOSED'" Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2408 Googl...

IKE/IKEv2 protocol implementations may allow network amplification attacks

Overview Implementations of the IKEv2 protocol are vulnerable to network amplification attacks. Description CWE-406: Insufficient Control of Network Message Volume Network Amplification IKE/IKEv2 and other UDP-based protocols can be used to amplify denial-of-service attacks. In some scenarios, an...

Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities (3076321)

This host is missing a critical security update according to Microsoft Bulletin MS15-065. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-2408

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1767 and CVE-2015-2401...

CVE-2015-2401

Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1767 and CVE-2015-2408...

CVE-2015-2408

CVE-2015-2408 affects Microsoft Internet Explorer 9–11. This memory corruption vulnerability can be triggered by visiting a crafted website, enabling remote code execution or a denial of service. Connected sources corroborate IE memory corruption, with related CVEs and a shared family of vulnerab...

Microsoft Internet Explorer Memory Corruption (MS15-065: CVE-2015-2408)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

KLA10634 Multiple vulnerabilities in Microsoft Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer. Malicious users can exploit these vulnerabilities to read local files, cause denial of service, bypass security restrictions, execute arbitrary code, gain privileges or obtain sensitive information. Below is a comple...

Oracle Solaris Third-Party Patch Update : php (cve_2013_4248_input_validation)

The remote Solaris system is missing necessary patches to address security updates : - The opensslx509parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of a...

Ubuntu: Security Advisory (USN-2408-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-2408

CVE-2014-2408 affects Oracle Database Server 11.1.0.7, 11.2.0.3/4, and 12.1.0.1, targeting the Core RDBMS component. The vulnerability is described as using unknown vectors related to the Grant Any Object Privilege and can potentially impact confidentiality and integrity when accessed by remote, ...

Design/Logic Flaw

The OpenSSL::SSL.verifycertificateidentity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows...

Design/Logic Flaw

The ssl.matchhostname function in the SSL module in Python 2.6 through 3.4 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate...

Design/Logic Flaw

The opensslx509parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x before 5.5.2 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL...