76 matches found
RHEL 7 : dhcp (RHSA-2021:2418)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2418 advisory. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration...
SUSE: Security Advisory (SUSE-SU-2016:2418-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:0835-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:0871-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:0871-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:0835-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 8 : unbound (RHSA-2020:2418)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2418 advisory. The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: amplification of an...
Oracle WebLogic Server Multiple Vulnerabilities (January 2019 CPU)
The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities: - XML external entity XXE vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read...
CVE-2019-2418
CVE-2019-2418 affects Oracle WebLogic Server (WLS Core Components). Affected versions are 10.3.6.0, 12.1.3.0 and 12.2.1.3. The vulnerability allows unauthenticated, network-based exploitation via the T3 protocol to compromise WebLogic Server, potentially leading to unauthorized update/insert/dele...
CVE-2018-2418
SAP MaxDB ODBC driver all versions before 7.9.09.07 allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...
CVE-2018-2418
SAP MaxDB ODBC driver (all versions before 7.9.09.07) is affected by CVE-2018-2418, enabling an attacker to inject code that can be executed by the application and thereby take control of the vulnerable process. Affected component: SAP MaxDB ODBC driver; root cause is a vulnerability in that driv...
CVE-2009-2418
CVE-2009-2418 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2011-2418
CVE-2011-2418 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-2418
CVE-2017-2418 concerns macOS before 10.12.4 where the Hypervisor framework could allow a guest OS user to read the CR8 control register from host/guest context via unspecified vectors. Connected documents confirm the affected product family and root cause: information leakage in Hypervisor state ...
CVE-2016-2418
media/libmedia/IOMX.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize certain metadata buffer pointers, which allows attackers to obtain sensitive information from process memory, and consequently bypass an unspecified protection mechanism, via unspecified vectors, as...
CVE-2016-2418
Summary: CVE-2016-2418 affects Android 6.x mediaserver’s media/libmedia/IOMX.cpp where certain metadata buffer pointers are not initialized, enabling an attacker to read sensitive process memory and bypass a protection mechanism to gain Signature or SignatureOrSystem privileges. Affected componen...
CVE-2015-2418
CVE-2015-2418 concerns a race condition in Microsoft Malicious Software Removal Tool (MSRT) prior to 5.26 that lets an authenticated local user escalate privileges by placing a crafted DLL in a local directory. The vulnerability stems from how MSRT loads DLLs, enabling privilege elevation when th...