199 matches found
Fedora 26 : community-mysql (2018-8b920c2b00)
MySQL 5.7.22 Changelog https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-22.html CVEs fixed CVE-2018-2755 CVE-2018-2758 CVE-2018-2759 CVE-2018-2761 CVE-2018-2762 CVE-2018-2766 CVE-2018-2769 CVE-2018-2771 CVE-2018-2773 CVE-2018-2775 CVE-2018-2776 CVE-2018-2777 CVE-2018-2778 CVE-2018-2779...
Ubuntu: Security Advisory (USN-3629-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : MySQL -- multiple vulnerabilities (57aec168-453e-11e8-8777-b499baebfeaf)
Oracle reports : MySQL Multiple Flaws Let Remote Authenticated Users Access and Modify Data, Remote and Local Users Deny Service, and Local Users Access Data and Gain Elevated Privileges - A local user can exploit a flaw in the Replication component to gain elevated privileges CVE-2018-2755. - A...
CVE-2018-2769
CVE-2018-2769 affects the MySQL Server component (subcomponent: Server: Pluggable Auth) of Oracle MySQL. Affected versions are 5.7.21 and earlier. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause a hang or a frequently repeatable crash (compl...
MySQL 5.7.x < 5.7.22 Multiple Vulnerabilities (RPM Check) (April 2018 CPU)
The version of MySQL running on the remote host is 5.7.x prior to 5.7.22. It is, therefore, affected by multiple vulnerabilities as noted in the April 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information. Note that Nessus has not...
CVE-2018-2769
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Pluggable Auth. Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
MySQL -- multiple vulnerabilities
Oracle reports: MySQL Multiple Flaws Let Remote Authenticated Users Access and Modify Data, Remote and Local Users Deny Service, and Local Users Access Data and Gain Elevated Privileges A local user can exploit a flaw in the Replication component to gain elevated privileges CVE-2018-2755. A remot...
Ubuntu 14.04 LTS : Apache Commons HttpClient vulnerabilities (USN-2769-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2769-1 advisory. It was discovered that Apache Commons HttpClient did not properly verify the Common Name or subjectAltName fields of X.509 certificates. An attacker coul...
CVE-2015-2769
CVE-2015-2769 describes multiple CSRF vulnerabilities in Websense TRITON AP-EMAIL PEM that allow remote attackers to hijack user authentication via unknown vectors. Affected products include Websense TRITON AP-EMAIL (earlier than 8.0.0) and related TRITON/AP-WEB, AP-DATA, and S/G components liste...
CVE-2015-2769
Multiple cross-site request forgery CSRF vulnerabilities in the Personal Email Manager PEM in Websense TRITON AP-EMAIL before 8.0.0 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors...
Memory corruption
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1794, CVE-2014-1797,...
Memory corruption
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1797,...
Memory corruption
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1794,...
CVE-2014-2769
The Connected document references CVE-2014-1772 (an Internet Explorer memory-corruption issue) and provides a root-cause analysis of that UAF-type vulnerability, noting that Microsoft released MS14-035 to patch it. The analysis describes triggering the issue via a crafted web page and includes a ...
Debian Security Advisory DSA 2769-1 (kfreebsd-9 - privilege escalation/denial of service)
Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-5691 Loganaden Velvindron and Gleb Smirnoff discovered that the SIOCSIFADDR...
CVE-2012-2769
CVE-2012-2769: Multiple XSS vulnerabilities in the topic administration page of the Extension::MobileUI extension before 1.02 for Best Practical Solutions RT 3.8.x and in Best Practical Solutions RT before 4.0.6. Remote attackers can inject arbitrary web script or HTML via unspecified vectors. Af...
Fedora Update for tor FEDORA-2011-15208
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Debian Security Advisory DSA 2331-1 (tor)
The remote host is missing an update to tor announced via advisory DSA 2331-1. OpenVAS Vulnerability Test $Id: deb23311.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2331-1 tor Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
CVE-2011-2769
Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATEFAST values in the Command field of a cell within an OR connection that it initiated, which allows remote relays to enumerate bridges by using these values...