SUSE: Security Advisory (SUSE-SU-2018:2411-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : kernel (CESA-2019:2411)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:2411 advisory. - kernel: hw: Spectre SWAPGS gadget vulnerability CVE-2019-1125 - kernel: broken permission and object lifetime handling for PTRACETRACEME CVE-2019-132...

Schweitzer Engineering Laboratories Programmable Automation Controller PLC Detection

Binary data 755333.prm...

CVE-2017-2411

creationtimestamp| type| source ---|---|--- 2019-01-17 17:12:38+00:00| seen| https://t.me/cibsecurity/2096...

CVE-2019-2411

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: SPMS Suite. The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows low privileged attacker with network access via TCP t...

CVE-2019-2411

The CVE-2019-2411 entry affects Oracle Hospitality Hospitality Cruise Shipboard Property Management System (SPMS Suite) within Oracle Hospitality Applications, specifically version 8.0.8. Public sources describe a vulnerability that enables a low-privilege, network-accessible attacker (via TCP) t...

CVE-2017-2411

In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS. This was addressed by enabling HTTPS for exchange rates...

CVE-2017-2411

The CVE-2017-2411 entry describes an issue in iOS prior to 11.2 where exchange rates were fetched over HTTP instead of HTTPS. Apple’s security content (iOS 11.2) documents this under the Calculator entry, noting that an attacker on a privileged network could alter currency conversion rates. The r...

CVE-2017-2411

In iOS before 11.2, exchange rates were retrieved from HTTP rather than HTTPS. This was addressed by enabling HTTPS for exchange rates...

CVE-2016-2411

CVE-2016-2411 describes an elevation of privilege in the Qualcomm Power Management kernel driver on Android 6.x prior to 2016-04-01. The root cause is a vulnerability in the power management kernel component that could allow a local malicious application with root access to execute code in the ke...

Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities (3076321)

This host is missing a critical security update according to Microsoft Bulletin MS15-065. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Memory corruption

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2389 and CVE-2015-2411...

CVE-2015-2411

Microsoft Internet Explorer 10 and 11 are affected by memory corruption vulnerabilities described under CVE-2015-2411 (and related CVEs). The publicly documented details indicate that a crafted website can trigger remote code execution or a denial of service via memory corruption in IE’s handling...

KLA10634 Multiple vulnerabilities in Microsoft Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer. Malicious users can exploit these vulnerabilities to read local files, cause denial of service, bypass security restrictions, execute arbitrary code, gain privileges or obtain sensitive information. Below is a comple...

Microsoft Internet Explorer CVE-2015-2411 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted webpage. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in...

Microsoft Internet Explorer Memory Corruption (MS15-065: CVE-2015-2411)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

Ubuntu: Security Advisory (USN-2411-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.10 : mountall vulnerability (USN-2411-1)

Saurav Sengupta discovered that mountall incorrectly handled umask when calling the mount utility, resulting in certain filesystems possibly being mounted with incorrect permissions. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

Oracle Identity Analytics / Sun Role Manager Unspecified Remote Vulnerability (April 2014 CPU)

The remote Oracle Identity Analytics formerly known as Sun Role Manager install is affected by an unspecified vulnerability that can be exploited by remote, authenticated attackers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2014-2411

CVE-2014-2411 affects Oracle Identity Analytics (Oracle Fusion Middleware) 11.1.1.5 and Sun Role Manager 5.0. an unspecified vulnerability could be exploited by remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors related to Security. The connected...