332 matches found
Oracle JRockit R28 < R28.3.7 Multiple Vulnerabilities (July 2015 CPU) (Bar Mitzvah) (Logjam)
The version of Oracle JRockit installed on the remote Windows host is R28 prior to R28.3.7. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the JCE component that allows a remote attacker to gain access to sensitive information. CVE-2015-2601 - An...
CVE-2015-2601
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE...
CentOS 6 / 7 : java-1.7.0-openjdk (CESA-2015:1229) (Bar Mitzvah) (Logjam)
Updated java-1.7.0-openjdk packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
RHEL 6 / 7 : java-1.7.0-openjdk (RHSA-2015:1229)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1229 advisory. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Multiple...
Oracle Linux 6 / 7 : java-1.7.0-openjdk (ELSA-2015-1229)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1229 advisory. 1:1.7.0.85-2.6.1.2.0.1.el71 - Update DISTRONAME in specfile 1:1.7.0.85-2.6.1.2 - Bump upstream tarball to u25b01 to fix issue with 8075374 backport...
Ubuntu 15.04 : linux vulnerability (USN-2601-1)
A race condition between chown and execve was discovered in the Linux kernel. A local attacker could exploit this race by using chown on a setuid-user-binary to gain administrative privileges. Note that Tenable Network Security has extracted the preceding description block directly from the Ubunt...
[security bulletin] HPSBHF03006 rev.1 - HP Integrated Lights-Out 2 (iLO 2) Denial of Service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04244787 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04244787 Version: 1 HPSBHF03006 rev....
CVE-2014-2601
HP iLO 2 (Integrated Lights-Out 2) remote DoS vulnerability (CVE-2014-2601) affects version 2.23 and earlier. A remote attacker can cause service denial via crafted HTTPS traffic (as shown by a vulnerability scanner tool). Notably, CVSS base score is 7.8 (HIGH) with network access, no authenticat...
CVE-2014-2601
The server in HP Integrated Lights-Out 2 aka iLO 2 2.23 and earlier allows remote attackers to cause a denial of service via crafted HTTPS traffic, as demonstrated by traffic from a CVE-2014-0160 vulnerability-assessment tool. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value...
CVE-2013-2601
The CVE-2013-2601 issue affects Citrix XenClient XT NDVM in versions prior to 2.1.3 and 3.x prior to 3.1.4. A UIVM-controlled network connection can be abused by a remote attacker to execute arbitrary commands. The description in the sources confirms the vulnerability class and impact but does no...
Debian DSA-2601-1 : gnupg, gnupg2 - missing input sanitation
KB Sriram discovered that GnuPG, the GNU Privacy Guard did not sufficiently sanitise public keys on import, which could lead to memory and keyring corruption. The problem affects both version 1, in the 'gnupg' package, and version two, in the 'gnupg2' package. %NASLMINLEVEL 70300 C Tenable Networ...
Ipswitch WhatsUp Gold 15.02 contains SQL injection and XSS vulnerabilities
Overview Ipswitch WhatsUp Gold 15.02 has been reported to contain blind SQL injection and cross-site scripting vulnerabilities. Description Ipswitch WhatsUp Gold 15.02 has been reported to contain blind SQL injection and cross-site scripting vulnerabilities.CWE-79-CVE-2012-2601 - Blind SQL...
CVE-2012-2601
SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter...
CVE-2012-2601
Ipswitch WhatsUp Gold 15.02 is affected by CVE-2012-2601 due to a blind SQL injection in WrVMwareHostList.asp via the sGroupList parameter, allowing remote SQL command execution. The issue is documented in multiple sources (NVD, CERT, Nessus) with PoC-like references and a CVSS base score of 7.5....
CVE-2012-2601
SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter...
CVE-2012-2601
creationtimestamp| type| source ---|---|--- 2012-07-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20035...
CVE-2011-2601
The CVE-2011-2601 issue affects macOS GPU WebGL rendering. The underlying problem is that GPU support does not properly constrain rendering time, allowing a remote attacker to cause a denial of service (desktop hang) through WebGL vectors. Specifically, it can be triggered by (1) shader programs ...
BlackBerry Enterprise Server / Attachment Service PDF Distiller Buffer Overflow (KB24547)
The version of BlackBerry Enterprise Server on the remote host is reportedly affected by a buffer overflow vulnerability in the PDF distiller component of the BlackBerry Attachment Service. By sending a specially crafted PDF file and having it opened on a BlackBerry smartphone, an attacker may be...
CVE-2010-2601
Multiple buffer-overflow vulnerabilities in the PDF distiller of the Attachment Service in BlackBerry Enterprise Server (BES) and related BlackBerry software (versions 4.1.7 and earlier; 5.0.0–5.0.2; BlackBerry Professional Software 4.1.4 and earlier) allow user-assisted remote attackers to cause...
CVE-2010-2601
Multiple buffer overflows in the PDF distiller in the Attachment Service component in Research In Motion RIM BlackBerry Enterprise Server BES software 4.1.7 and earlier and 5.0.0 through 5.0.2, and BlackBerry Professional Software 4.1.4 and earlier, allow user-assisted remote attackers to cause a...