Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2410-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2410-1 advisory. A buffer overflow was discovered in Skia. If a user were tricked in to opening a specially crafted website, an attacked could potentially exploit this to...

Ubuntu: Security Advisory (USN-2410-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-2410

CVE-2014-2410 is described as an unspecified vulnerability in Oracle Java SE 8 related to JavaFX that can affect confidentiality, integrity, and availability via remote vectors. The NVD lists a base score of 9.3 (HIGH) with network access, no authentication, and complete impact across CIA. Connec...

Oracle Java SE Multiple Vulnerabilities (April 2014 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 8 Update 5, 7 Update 55, 6 Update 75, or 5 Update 65. It is, therefore, potentially affected by security issues in the following components : - 2D - AWT - Deployment - Hotspot - JAX-WS -...

CVE-2013-2410

Technical details about CVE-2013-2410 are not publicly disclosed in the provided connected documents; monitor for updates from official advisories and vulnerability databases.

RealNetworks RealPlayer Multiple Vulnerabilities - Sep12 (Mac OS X)

This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbrealplayermultvulnsep12macosx.nasl 6022 2017-04-25 12:51:04Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities - Sep12 Mac OS X Authors: Rachana Shetty Copyright: Copyright...

CVE-2012-2410

CVE-2012-2410 refers to a buffer overflow in RealNetworks RealPlayer prior to 15.0.6.14, RealPlayer SP 1.0–1.1.5, and Mac RealPlayer prior to 12.0.1.1750. The vulnerability can be triggered by a crafted RealMedia file to cause a denial of service and possibly other impact. The description explici...

RealPlayer for Windows < 15.0.6.14 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is earlier than 15.0.6.14. As such, it is affected by multiple vulnerabilities : - A buffer overflow error exists related to 'AAC' handling, specifically unpacking of the stream data. CVE-2012-2407 - A...

Real Networks RealPlayer < 15.0.6.14 Multiple Vulnerabilities

Binary data 6574.prm...

Debian: Security Advisory (DSA-2410-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2410-1 : libpng - integer overflow

Jueri Aedla discovered an integer overflow in the libpng PNG library, which could lead to the execution of arbitrary code if a malformed image is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

CVE-2011-2410

Cross-site scripting XSS vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-2410

CVE-2011-2410 is an XSS vulnerability in HP OpenView Performance Insight (versions 5.3, 5.31, 5.4, 5.41, 5.41.001, 5.41.002). The available documents consistently describe a cross-site scripting flaw that lets an attacker inject arbitrary web script or HTML via unspecified vectors. Connected sour...

CVE-2010-2410

Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2395 and CVE-2010-2409...

CVE-2010-2410

Unspecified vulnerability in the Cabo/UIX component in Oracle Fusion Middleware 10.1.2.3 and 10.1.3.5 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2395 and CVE-2010-2409...

CVE-2010-2410

Technical details for CVE-2010-2410 are not publicly available in the provided documents. Monitor for updates.

Fedora Update for sssd FEDORA-2010-0451

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-2410

The CVE-2009-2410 issue affects sssd 0.4.1, where the local_handler_callback in server/responder/pam/pam_LOCAL_domain.c mishandles blank-password accounts in the SSSD BE database. This allows context-dependent attackers to obtain access by supplying the account username and an arbitrary password ...

Fedora SSSD BE数据库无密码认证绕过漏洞

Bugraq ID: 35868 CVE ID：CVE-2009-2410 Fedora是一款基于linux内核的发行版本。 Fedora SSSD存在验证绕过问题，远程攻击者可以利用漏洞获得对目标系统的未授权访问。 如果用户增加到SSSD BE数据库，但没有设置密码，那么这个用户就可以通过SSH连接配置SSSD客户端机器，并无需任何密码即可访问。 RedHat SSSD 0.4.1-2 RedHat Fedora 11 厂商解决方案 用户可参考如下安全公告获得补丁信息： https://bugzilla.redhat.com/showbug.cgi?id=514057...

Directory traversal

Directory traversal vulnerability in the HP JetDirect web administration interface in the HP-ChaiSOE 1.0 embedded web server on the LaserJet 9040mfp, LaserJet 9050mfp, and Color LaserJet 9500mfp before firmware 08.110.9; LaserJet 4345mfp and 9200C Digital Sender before firmware 09.120.9; Color...