91 matches found
Oracle Linux 6 / 7 : thunderbird (ELSA-2017-2534)
The remote Oracle Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2017-2534 advisory. 52.3.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 52.3.0-1 - Update to 52.3.0 52.2.1-1 - Update ...
successfactors.com XSS vulnerability
Vulnerable URL: https://www.successfactors.com/enus/search.html?searchTerm=Hello%20World=0=10=true=/%22%3E%3Cscript%3Eprompt/OPENBUGBOUNTY/%3C/script%3E=%20=Hello%20World=56&sf-search-filter-checkbox;=whitepapers Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS...
CVE-2017-2534
CVE-2017-2534 affects macOS Sierra (Speech Framework). A crafted app could cause a sandbox-escape via the Speech Framework vulnerability. Affected: macOS before 10.12.5. Impact: sandbox escape (local, requires user interaction). Remediation: Apple Security Update 2017-002 for macOS 10.12.5 (and r...
CVE-2016-2534
creationtimestamp| type| source ---|---|--- 2016-02-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39405...
Oracle: Security Advisory (ELSA-2013-2534)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2534
CVE-2015-2534 affects Windows Hyper-V on Windows 8.1, Windows Server 2012 R2, and Windows 10. The issue is improper processing of ACL settings in Hyper-V, enabling a local attacker to bypass network-traffic restrictions via a crafted application (security feature bypass). Public advisories and up...
Microsoft Windows Hyper-V CVE-2015-2534 Security Bypass Vulnerability
Description Microsoft Windows is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Windows 10 for x64-based Systems...
MS15-105: Vulnerability in Windows Hyper-V Could Allow Security Feature Bypass (3091287)
The remote Windows host is affected by a security bypass vulnerability in Windows Hyper-V due to improper application of access control list ACL configuration settings. A local attacker can exploit this, via a specially crafted application, to cause Hyper-V to allow unintended network traffic. C...
Ubuntu: Security Advisory (USN-2534-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : kernel (openSUSE-SU-2012:0206-1)
The openSUSE 11.3 kernel was updated to fix various bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used...
CVE-2014-2534
CVE-2014-2534 affects /sbin/pppoectl in BlackBerry QNX Neutrino RTOS 6.4.x/6.5.x. Local users can disclose sensitive information by reading "bad parameter" lines in error messages, demonstrated by accessing the root password hash in /etc/shadow. This is a local information disclosure vulnerabilit...
CVE-2014-2534
creationtimestamp| type| source ---|---|--- 2014-03-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32156...
Debian Security Advisory DSA 2534-1 (postgresql-8.4 - several vulnerabilities)
Two vulnerabilities related to XML processing were discovered in PostgreSQL, an SQL database. CVE-2012-3488contrib/xml2's xsltprocess can be used to read and write external files and URLs. CVE-2012-3489xmlparse fetches external files or URLs to resolve DTD and entity references in XML values. Thi...
Debian: Security Advisory (DSA-2534-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2013-2534)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2534 advisory. - KVM: add missing void user COPYING CREDITS Documentation Kbuild MAINTAINERS Makefile README REPORTING- BUGS arch block crypto drivers firmware fs...
Debian DSA-2534-1 : postgresql-8.4 - several vulnerabilities
Two vulnerabilities related to XML processing were discovered in PostgreSQL, a SQL database. - CVE-2012-3488 contrib/xml2's xsltprocess can be used to read and write external files and URLs. - CVE-2012-3489 xmlparse fetches external files or URLs to resolve DTD and entity references in XML values...
SuSE Update for kernel openSUSE-SU-2012:0206-1 (kernel)
Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse201202061.nasl 8313 2018-01-08 07:02:11Z teissa $ SuSE Update for kernel openSUSE-SU-2012:0206-1 kernel Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...
SuSE Update for kernel openSUSE-SU-2012:0236-1 (kernel)
Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse201202361.nasl 8295 2018-01-05 06:29:18Z teissa $ SuSE Update for kernel openSUSE-SU-2012:0236-1 kernel Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...
kernel: security and bugfix update. (important)
The openSUSE 11.4 kernel was updated to fix bugs and security issues. Following security issues have been fixed: CVE-2011-4604: If root does read on a specific socket, it's possible to corrupt kernel memory over network, with an ICMP packet, if the B.A.T.M.A.N. mesh protocol is used. CVE-2011-269...