CVE-2018-2823

CVE-2018-2823 affects Oracle Transportation Management (Oracle Supply Chain Products Suite), subcomponent Database, with a vulnerable version 6.4.3. The flaw allows a low-privilege, network-adjacent attacker to exploit via HTTP to cause unauthorized creation, deletion, or modification of data wit...

PowerISO ISO Parsing Use After Free(CVE-2017-2823)

Summary A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file can cause a vulnerability resulting in potential code execution. An attacker can send a specific .ISO file to trigger this vulnerability. Tested Versions PowerISO 6.8 6, ...

CVE-2017-2823

PowerISO is affected by CVE-2017-2823 due to a use-after-free in the .ISO parsing function of PowerISO 6.8. A specially crafted .ISO file can trigger the vulnerability, and an attacker can deliver this payload by sending such a file to the PowerISO software, potentially enabling arbitrary code ex...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2823-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2823-1 advisory. It was discovered that the SCTP protocol implementation in the Linux kernel performed an incorrect sequence of protocol-initialization steps. A local...

CVE-2015-2823

CVE-2015-2823 affects Siemens SIMATIC HMI/WinCC products (HMI Basic Panels 2nd Gen and others) where an attacker can authenticate remotely by using a password hash instead of the password. The issue is a password-hash authentication weakness that can enable unauthorized access to multiple SAP/Win...

Microsoft Internet Explorer Multiple Vulnerabilities (2976627)

This host is missing a critical security update according to Microsoft Bulletin MS14-051. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-2823

CVE-2014-2823 is part of a family of memory-corruption vulnerabilities in Microsoft Internet Explorer (IE), affecting IE versions 6 through 11. The connected data confirms that these issues are memory-corruption based, can allow remote code execution or memory corruption via crafted websites, and...

Microsoft Internet Explorer Memory Corruption (MS14-051: CVE-2014-2823)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

openSUSE Security Update : chromium / v8 (openSUSE-SU-2012:0813-1)

Update Chromium to 22.0.1190 - Security Fixes bnc769181 : - CVE-2012-2815: Leak of iframe fragment id - CVE-2012-2816: Prevent sandboxed processes interfering with each other - CVE-2012-2817: Use-after-free in table section handling - CVE-2012-2818: Use-after-free in counter layout -...

Debian DSA-2823-1 : pixman - integer underflow

Bryan Quigley discovered an integer underflow in Pixman which could lead to denial of service or the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2823. The...

CVE-2013-2823

The CVE-2013-2823 entry concerns Catapult Software’s DNP3 I/O driver (Catapult v7.2.0.56) and GE Proficy DNP3 I/O driver (Catapult v7.2.0.60 / GE IP 7.20k) used with CIMPLICITY/iFIX in GE Proficy HMI/SCADA. A crafted input over a serial line, or a specially crafted TCP packet in IP deployments, c...

Gentoo Security Advisory GLSA 201208-03 (chromium)

The remote host is missing updates announced in advisory GLSA 201208-03. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Google Chrome Multiple Vulnerabilities - July 12 (Windows)

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnjul12win.nasl 5988 2017-04-20 09:02:29Z teissa $ Google Chrome Multiple Vulnerabilities - July 12 Windows Authors: Rachana Shetty Copyright: Copyright c 2012...

Google Chrome Multiple Vulnerabilities (Jul 2012) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : chromium -- multiple vulnerabilities (ff922811-c096-11e1-b0f4-00262d5ed8ee)

Google Chrome Releases reports : 118633 Low CVE-2012-2815: Leak of iframe fragment id. Credit to Elie Bursztein of Google. 120222 High CVE-2012-2817: Use-after-free in table section handling. Credit to miaubiz. 120944 High CVE-2012-2818: Use-after-free in counter layout. Credit to miaubiz. 120977...

CVE-2012-2823

Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG resources...

CVE-2012-2823

Chromium/Google Chrome vulnerability CVE-2012-2823 is a use-after-free in SVG resource handling in pre-20.0.1132.43 builds. It could cause a remote DoS or other impact via SVG-related vectors. Connected docs confirm Chromium-related CVEs and advise upgrading to patched releases; no exact fixed ve...

Stable Channel Update

The Google Chrome team is happy to announce the arrival of Chrome 20 20.0.1132.43 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority ...

APPLE-SA-2011-10-12-4 Safari 5.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-4 Safari 5.1.1 Safari 5.1.1 is now available and addresses the following: Safari Available for: Mac OS X v10.6.8, Mac OS X Server v10.6.8, OS X Lion v10.7.2, OS X Lion Server v10.7.2, Windows 7, Vista, XP SP2 or later Impact:...

Google Chrome < 13.0.782.215 Multiple Vulnerabilities (Sep 2011) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...