Mozilla Firefox < 49 Multiple Vulnerabilities

The version of Mozilla Firefox installed on the remote Windows host is prior to 49. It is, therefore, affected by multiple vulnerabilities as noted in Mozilla Firefox stable channel update release notes for 2016/09/20. Please refer to the release notes for additional information. Note that Nessus...

Mozilla Firefox < 49 Multiple Vulnerabilities (macOS)

The version of Mozilla Firefox installed on the remote macOS host is prior to 49. It is, therefore, affected by multiple vulnerabilities as noted in Mozilla Firefox stable channel update release notes for 2016/09/20. Please refer to the release notes for additional information. Note that Nessus h...

CVE-2018-2827

The CVE-2018-2827 vulnerability affects Oracle Hospitality Suite8, specifically the Profile subcomponent, in Oracle Hospitality Applications 8.x. The issue is exploitable by a low-privileged attacker who can access the service over HTTP, with exploitation requiring user interaction, potentially l...

Foscam IP Video Camera CGIProxy.fcgi Account Creation Command Injection Vulnerability(CVE-2017-2827)

Summary An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting...

CVE-2017-2827

An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary shell characters during account creation resulting in...

CVE-2017-2827

The CVE-2017-2827 issue affects Foscam C1 Indoor HD Cameras via the CGIProxy.fcgi service in the web management interface. An account creation command (addAccount) accepts usrName, usrPwd, and privilege (required to be 2) and passes these to FTPconfigUser, which builds a shell command: sh /usr/bi...

openSUSE: Security Advisory for MozillaFirefox, mozilla-nss (openSUSE-SU-2016:2386-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : MozillaFirefox / mozilla-nss (openSUSE-2016-1119)

This update for MozillaFirefox and mozilla-nss fixes the following issues : MozillaFirefox was updated to version 49.0 boo999701 - New features - Updated Firefox Login Manager to allow HTTPS pages to use saved HTTP logins. - Added features to Reader Mode that make it easier on the eyes and the ea...

openSUSE: Security Advisory for MozillaFirefox, mozilla-nss (openSUSE-SU-2016:2368-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for MozillaFirefox, mozilla-nss (important)

This update for MozillaFirefox and mozilla-nss fixes the following issues: MozillaFirefox was updated to version 49.0 boo999701 - New features Updated Firefox Login Manager to allow HTTPS pages to use saved HTTP logins. Added features to Reader Mode that make it easier on the eyes and the ears...

CVE-2016-2827

CVE-2016-2827 affects Mozilla Firefox (before 49.0). The issue is in mozilla::net::IsValidReferrerPolicy: a CSP referrer directive containing zero values can trigger an out-of-bounds read, leading to a crash. Public disclosures note MFSA 2016-85 and list affected vectors, with CVSS metrics indica...

CVE-2016-2827

The mozilla::net::IsValidReferrerPolicy function in Mozilla Firefox before 49.0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a Content Security Policy CSP referrer directive with zero values...

SOL64505405 - NTP vulnerability CVE-2016-4956

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

CVE-2015-2827

CA Spectrum 9.2.x and 9.3.x before 9.3 H02 contain a stored cross-site scripting vulnerability (CVE-2015-2827) due to insufficient validation of requests, enabling remote authenticated users to inject arbitrary web script or HTML. Affected versions should upgrade to 9.3 H02 or newer (or 9.4+).

KLA10537 Multiple vulnerabilities in CA Spectrum

Multiple serious vulnerabilities have been found in CA Spectrum. Malicious users can exploit these vulnerabilities to gain privileges or inject arbitrary code. Below is a complete list of vulnerabilities 1. Improper data serialization can be exploited remotely via a specially designed Java object...

Microsoft Internet Explorer Multiple Vulnerabilities (2976627)

This host is missing a critical security update according to Microsoft Bulletin MS14-051. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-2827

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-2774, CVE-2014-2820, CVE-2014-2826, an...

CVE-2014-2827

CVE-2014-2827 affects Microsoft Internet Explorer (IE) 6–11. The vulnerability involves memory corruption triggered by a crafted web site, enabling remote code execution or, per description, a denial of service. In the provided sources, this is described as the same-class issue alongside other IE...

KingScada kxClientDownload.ocx ActiveX - Remote Code Execution

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = GoodRanking include Msf::Exploit::Remote::BrowserExploitServer include...

WellinTech Multiple Products kxClientDownload ActiveX Remote Code Execution (CVE-2013-2827)

A remote code execution vulnerability exists in WellinTech multiple products. The vulnerability exists in ClientDownload.ocx ActiveX control and is due to insufficient sanitization of ProjectURL property. A remote unauthenticated attacker can leverage this vulnerability to download and load an...