Microsoft Office Memory Corruption (MS15-081: CVE-2015-2467)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-2467-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2467-1 advisory. A null pointer dereference flaw was discovered in the the Linux kernel's SCTP implementation when ASCONF is used. A remote attacker could exploit this fl...

Security feature bypass

Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect integrity via unknown vectors related to Security, a different vulnerability than CVE-2014-2467...

CVE-2014-2467

CVE-2014-2467 is described as an unspecified vulnerability in the Oracle Agile PLM Framework component of Oracle Supply Chain Products Suite 9.3.3. The connected documents do not provide concrete technical details (affected component/version, root cause, impact or remediation). Monitor for updates.

IBM Domino 8.5.x < 8.5.3 FP5 Multiple Vulnerabilities

The remote host has a version of IBM Domino formerly Lotus Domino 8.5.x prior to 8.5.3 Fix Pack 5 installed. It is, therefore, reportedly affected by the following vulnerabilities : - The included version of the IBM Java SDK contains a version of the IBM JRE that contains numerous security issues...

Oracle Java SE Multiple Vulnerabilities -05 June 13 (Windows)

This host is installed with Oracle Java SE and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboraclejavasemultvuln05jun13win.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE Multiple Vulnerabilities -05 June 13 Windows Authors: Thanga Prakash S Copyright: Copyright c...

CVE-2013-2467 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-25-openj9...

CVE-2013-2467

CVE-2013-2467 is a Java Runtime Environment (JRE) vulnerability listed in IBM advisories as addressed by upgrading the IBM JRE to 1.7 SR5 or later (or switching to Oracle JRE) for affected IBM products such as Host On-Demand. IBM’s bulletin groups CVE-2013-2467 among many JRE-related flaws fixed ...

Scientific Linux Security Update : firefox on SL4.x i386/x86_64

Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as t...

Scientific Linux Security Update : firefox on SL5.x i386/x86_64

Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as t...

Debian: Security Advisory (DSA-2467-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2467-1 : mahara - insecure defaults

It was discovered that Mahara, the portfolio, weblog, and resume builder, had an insecure default with regards to SAML-based authentication used with more than one SAML identity provider. Someone with control over one IdP could impersonate users from other IdP's. %NASLMINLEVEL 70300 C Tenable...

CentOS Update for firefox CESA-2009:1162 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-2467

CVE-2011-2467 describes an SQL injection vulnerability in the Likewise Security Authority (lsass) used by Likewise Open (versions 5.4–6.1) and Likewise Enterprise 6.0. The vulnerability could allow a local attacker to execute arbitrary SQL commands via unspecified vectors, with impact described a...

CVE-2010-2467

CVE-2010-2467 affects the S2 Security NetBox (likely 2.x–3.x) used in Linear eMerge 50/5000 and Sonitrol eAccess. The FTP server storing database backups does not require a password, enabling remote download of backups via FTP requests. Exploitation details are not provided in the connected docum...

CVE-2010-2467

The S2 Security NetBox, possibly 2.x and 3.x, as used in the Linear eMerge 50 and 5000 and the Sonitrol eAccess, does not require setting a password for the FTP server that stores database backups, which makes it easier for remote attackers to download backup files via unspecified FTP requests...

CentOS 5 : firefox (CESA-2009:1162)

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

SLES11: Security update for MozillaFirefox

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: MozillaFirefox MozillaFirefox-translations mozilla-xulrunner190 mozilla-xulrunner190-gnomevfs mozilla-xulrunner190-translations More details may also be foun...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-6379)

The MozillaFirefox 3.0.12 release fixes various bugs and some critical security issues. MFSA 2009-34 / CVE-2009-2462 / CVE-2009-2463 / CVE-2009-2464 / CVE-2009-2465 / CVE-2009-2466: Mozilla developers and community members identified and fixed several stability bugs in the browser engine used in...

SuSE 11 Security Update : MozillaFirefox (SAT Patch Number 1134)

The Mozilla Firefox 3.0.12 release fixes various bugs and some critical security issues. - Mozilla developers and community members identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory...