SUSE: Security Advisory (SUSE-SU-2021:2764-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:2764-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Java SE 1.7.0_261 / 1.8.0_251 / 1.11.0_7 / 1.14.0_1 Multiple Vulnerabilities (Apr 2020 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 261, 8 Update 251, 11 Update 7, or 14 Update 1. It is, therefore, affected by multiple vulnerabilities related to the following components : - Oracle Java SE and Java SE Embedded are...

CVE-2020-2764

CVE-2020-2764 affects Oracle Java SE Advanced Management Console (component: Advanced Management Console) with 2.16 impacted. The vulnerability allows unauthenticated, network-based access via multiple protocols to read a subset of Java SE data, caused by the underlying issue in the Advanced Mana...

CVE-2019-2764

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2019-2764

CVE-2019-2764 affects the Oracle Outside In Technology component (subcomponent Outside In Filters) used by Oracle Fusion Middleware, with confirmed impact on Rational DOORS Next Generation 6.0.6.1 where the vulnerability could allow an unauthenticated attacker with network access over HTTP to rea...

Oracle Solaris Critical Patch Update : apr2018_SRU11_3_30_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NTPD. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker...

CVE-2018-2764

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...

CVE-2018-2764

CVE-2018-2764 affects the Solaris kernel: vulnerable in Solaris on supported 10 and 11.3 systems, exploitable via network access to Solaris over NFS, leading to possible hang or complete denial of service. CVSS 3.0 base score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The advisory context from th...

CVE-2018-2764

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...

CVE-2016-2764

CVE-2016-2764 entry is rejected and not associated with any vulnerability.

CVE-2016-2764

...

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerability (USN-2764-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2764-1 advisory. Dmitry Vyukov discovered that the Linux kernel did not properly initialize IPC object state in certain situations. A local attacker could use this to escalate the...

CVE-2015-2764

Multiple cross-site scripting XSS vulnerabilities in Websense TRITON AP-DATA before 8.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS 1 Mobile or 2 DLP report catalog...

CVE-2015-2764

CVE-2015-2764 describes multiple XSS vulnerabilities in Websense TRITON AP-DATA prior to 8.0.0, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors to the DSS Mobile or DLP report catalog. The root cause is not more precisely defined in the provided documents,...

CVE-2014-2764

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1794,...

Memory corruption

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1794,...

Memory corruption

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1794, CVE-2014-1797,...

Memory corruption

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1797,...

CVE-2014-2764

CVE-2014-2764 (Internet Explorer memory corruption) is linked to IE 10/11 memory-use issues. Connected analysis outlines a use-after-free/memory-corruption root cause with a Microsoft patch (MS14-035) addressing the issue; POC details and exploitation context are discussed. No definitive product/...