90 matches found
CVE-2020-2544
CVE-2020-2544 affects Oracle WebLogic Server (Console component). Affected versions include 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability is exploitable over HTTP and allows an unauthenticated attacker with network access to compromise WebLogic Server; successful attacks re...
CVE-2020-2544
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...
RHEL 7 : Ansible (RHSA-2019:2544)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:2544 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over SSH and does n...
Oracle Solaris Critical Patch Update : jan2019_SRU11_1_19_6_0
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows...
CVE-2019-2544
CVE-2019-2544 is a vulnerability in the Oracle Solaris kernel component affecting Solaris 10 and 11. The issue allows an unauthenticated attacker who can log on to the infrastructure where Solaris runs to read data from the system (impact: confidentiality). Normally listed with CVSSv3 base score ...
OracleVM 3.3 : Unbreakable / etc (OVMSA-2018-0231)
The remote OracleVM system is missing necessary patches to address critical security updates : - x86/fpu: Make eager FPU default Mihai Carabas Orabug: 28156176 CVE-2018-3665 - KVM: Fix stack-out-of-bounds read in writemmio Wanpeng Li Orabug: 27951287 CVE-2017-17741 CVE-2017-17741 - xfs: set forma...
Unbreakable Enterprise kernel security update
kernel-uek 3.8.13-118.21.4 - x86/fpu: Make eager FPU default Mihai Carabas Orabug: 28156176 CVE-2018-3665 3.8.13-118.21.3 - KVM: Fix stack-out-of-bounds read in writemmio Wanpeng Li Orabug: 27951287 CVE-2017-17741 CVE-2017-17741 - xfs: set format back to extents if xfsbmapextentstobtree Eric...
CVE-2017-2544
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...
CVE-2017-2544
CVE-2017-2544 affects WebKit in Apple iOS prior to 10.3.2 and Safari prior to 10.1.1. The issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and app crash) via a crafted web site. Apple patches were released: iOS 10.3.2 and Safari 10.1.1. Impac...
CVE-2017-2544
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted we...
Ubuntu 12.04 LTS : linux vulnerabilities (USN-2967-1)
It was discovered that the Linux kernel did not properly enforce rlimits for file descriptors sent over UNIX domain sockets. A local attacker could use this to cause a denial of service. CVE-2013-4312 Ralf Spenneberg discovered that the Aiptek Tablet USB device driver in the Linux kernel did not...
CVE-2016-2544
Race condition in the queuedelete function in sound/core/seq/seqqueue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service use-after-free and system crash by making an ioctl call at a certain time...
CVE-2016-2544
Race condition in the queuedelete function in sound/core/seq/seqqueue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service use-after-free and system crash by making an ioctl call at a certain time...
CVE-2016-2544
CVE-2016-2544 corresponds to a race in the Linux kernel’s sound/core/seq/seq_queue.c queue_delete path (pre-4.4.1). A local attacker can trigger a use-after-free via an ioctl timing flaw, leading to a denial of service and possible system crash. Public references note fixes in kernel 4.4.1 and re...
nyu.edu XSS vulnerability
Vulnerable URL: http://www.nyu.edu/cgi-bin/cgiwrap/spa268/uyghurscript.pl Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2544 Google Pagerank| 7 VIP websi...
Ubuntu: Security Advisory (USN-2930-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-2929-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-2929-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-2930-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...