Oracle Java SE 1.7.x < 1.7.0_211 / 1.8.x < 1.8.0_201 / 1.11.x < 1.11.0_2 Multiple Vulnerabilities (January 2019 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 211, 8 Update 201, 11 Update 2. It is, therefore, affected by multiple vulnerabilities related to the following components : - An issue in libjpeg 9a, a divide-by-zero error, could...

CVE-2019-2449

CVE-2019-2449 affects Oracle Java SE 8u192 (Java SE Deployment). An unauthenticated attacker with network access via multiple protocols can exploit a vulnerability to cause a partial denial of service on Java SE. Attacks are difficult to exploit and require user interaction. The description notes...

CVE-2019-2449

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Deployment. The supported version that is affected is Java SE: 8u192. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks...

Oracle Java SE DoS Vulnerability (cpujan2019) - Linux

Oracle Java SE is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Java SE DoS Vulnerability (cpujan2019) - Windows

Oracle Java SE is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache Tomcat < 6.0.14 Multiple Vulnerabilities

According to its self-reported version number, the Apache Tomcat instance listening on the remote host is prior to 6.0.14. It is, therefore, affected by the following vulnerabilities : - Cross-site scripting XSS vulnerabilities exists due to improper validation of user-supplied input before...

CVE-2018-2449

SAP SRM MDM Catalog in SAP NetWeaver 7.3 (versions 3.73, 7.31, 7.32) contains an authentication flaw in the import functionality that does not check credentials for a valid repository user. This creates an unauthenticated path that can be used on Windows to perform SMB relaying, effectively bypas...

CVE-2017-2449

The CVE-2017-2449 entry is supported by connected documents showing a Bluetooth memory corruption issue in macOS Sierra (affecting macOS 10.12.3 and 10.12.4). The vulnerability could allow a crafted app to execute arbitrary code with kernel privileges (or cause a denial of service via use-after-f...

About the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite

About the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite This document describes the security content of macOS Sierra 10.12.4, Security Update 2017-001 El Capitan, and Security Update 2017-001 Yosemite. About Apple security...

CVE-2016-2449

services/camera/libcameraservice/device3/Camera3Device.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate template IDs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtainin...

CVE-2016-2449

CVE-2016-2449 affects Android mediaserver: Camera3Device.cpp in mediaserver allows privilege escalation due to not validating template IDs, enabling a crafted app to gain Signature or SignatureOrSystem access. Affected: Android 4.x before 4.4.4; 5.0.x before 5.0.2; 5.1.x before 5.1.1; 6.x before ...

Oracle: Security Advisory (ELSA-2007-0569)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2013-0958)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2449

Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass."...

CVE-2015-2449

CVE-2015-2449 affects Microsoft Internet Explorer (IE) versions 7–11 and Microsoft Edge, with the underlying issue described as an ASLR (Address Space Layout Randomization) bypass by visiting a crafted web page. Technical details in the connected documents confirm affected products and that the v...

KLA10648 Multiple vulnerabilities in Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer. Malicious users can exploit these vulnerabilities to Bypass security restrictions, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Multiple memory corruption...

Oracle 9i XDB HTTP PASS Overflow (win32)

No description provided by source. $Id: oracle9ixdbpass.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

Oracle 9i XDB FTP UNLOCK Overflow (win32)

No description provided by source. $Id: oracle9ixdbftpunlock.rb 10559 2010-10-05 23:41:17Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...

Oracle 9i XDB FTP PASS Overflow (win32)

No description provided by source. $Id: oracle9ixdbftppass.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

CVE-2014-2449

Technical details about CVE-2014-2449 are not publicly provided in the supplied documents; the connected sources reference the vulnerability at a high level without affected products, versions, impact, or remediation. Monitor for updated, specific disclosures.