288 matches found
Oracle Linux 7 : openssh (ELSA-2016-2588)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2588 advisory. - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes 1329191 Tenable has extracted the preceding description block directly from th...
CVE-2015-2588
Technical details are not publicly available in the provided documents. No confirmed affected versions, vulnerable components, or remediation are described here. Monitor for updates from the referenced sources.
Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2588-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2588-1 advisory. A stack overflow was discovered in the the microcode loader for the intel x86 platform. A local attacker could exploit this flaw to cause a denial of...
Ubuntu: Security Advisory (USN-2588-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2012-2588
CVE-2012-2588 is an XSS vulnerability in MailEnable Enterprise 6.5. The issue allows remote attackers to inject arbitrary web script or HTML via SMTP message fields (From, To, Subject) or the message body, exploiting malformed headers/body to execute scripts in a user’s context. Public references...
CVE-2014-2588
CVE-2014-2588 affects McAfee Asset Manager 6.6, where the servlet/downloadReport endpoint is vulnerable through the reportFileName parameter. The root cause is directory traversal via a ".." input, allowing remote authenticated users to read arbitrary files on the server. Public sources from NVD ...
Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2013-2588)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2588 advisory. - ip6output: do skb ufo init for peeked non ufo skb as well Jiri Pirko Orabug: 17951806 CVE-2013-4470 - ipoutput: do skb ufo init for peeked non uf...
Debian: Security Advisory (DSA-2588-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VLC Media Player '.AVI' File BOF Vulnerability (Linux)
The host is installed with VLC Media Player and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodvlcmediaplayeravibofvulnlin.nasl 7052 2017-09-04 11:50:51Z teissa $ VLC Media Player '.AVI' File BOF Vulnerability Linux Authors: Madhuri D Copyright: Copyright c 2011...
CVE-2011-2588
The CVE-2011-2588 entry describes a heap-based buffer overflow in VLC’s AVI demuxer (AVI_ChunkRead_strf in libavi.c) that can be triggered by a crafted AVI file. This allows remote crashes or possibly arbitrary code execution and affects VLC versions before 1.1.11. Mitigation: upgrade VLC to 1.1....
Adobe Shockwave Player Multiple Remote Code Execution Vulnerabilities - Feb 2011
This host is installed with Adobe Shockwave Player and is prone to multiple remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultcodeexecvulnfeb11.nasl 5424 2017-02-25 16:52:36Z teissa $ Adobe Shockwave Player Multiple Remote Code Execution...
Security update available for Shockwave Player
Security update available for Shockwave Player Release date: February 8, 2011 Vulnerability identifier: APSB11-01 CVE number: CVE-2010-2587, CVE-2010-2588, CVE-2010-2589, CVE-2010-4092, CVE-2010-4093, CVE-2010-4187, CVE-2010-4188, CVE-2010-4189, CVE-2010-4190, CVE-2010-4191, CVE-2010-4192,...
Memory corruption
The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2588 and CVE-2010-4188...
CVE-2010-2588
Adobe Shockwave Player
CVE-2010-2588
The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2587 and CVE-2010-4188...
CVE-2010-2587
The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2010-2588 and CVE-2010-4188...
Shockwave Player < 11.5.9.620 (APSB11-01)
The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.9.620. Such versions are potentially affected by the following issues : - Several unspecified errors exist in the 'dirapi.dll' module that may allow arbitrary code execution. CVE-2010-2587,...
CVE-2009-2588
creationtimestamp| type| source ---|---|--- 2009-08-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34774 2009-08-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34775 2009-08-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34776...
CVE-2009-2588
The CVE-2009-2588 entry relates to multiple cross-site scripting (XSS) vulnerabilities in the Hotscripts Type PHP Clone Script. The affected components are the msg parameter in three pages: feedback.php, index.php, and lostpassword.php. The underlying issue is improper input handling that allows ...
