Debian DSA-5212-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5212 advisory. - Use after free in FedCM. CVE-2022-2852 - Heap buffer overflow in Downloads. CVE-2022-2853 - Use after free in SwiftShader. CVE-2022-2854 - Use after free in...

Google Chrome Security Update (stable-channel-update-for-desktop_16-2022-08) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

FreeBSD : chromium -- multiple vulnerabilities (f12368a8-1e05-11ed-a1ef-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f12368a8-1e05-11ed-a1ef-3065ec8fd3ec advisory. - Use after free in FedCM. CVE-2022-2852 - Heap buffer overflow in Downloads. CVE-2022-2853 -...

Google Chrome < 104.0.5112.101 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 104.0.5112.101. It is, therefore, affected by multiple vulnerabilities as referenced in the 202208stable-channel-update-for-desktop16 advisory. - Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.10...

Google Chrome < 104.0.5112.101 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 104.0.5112.101. It is, therefore, affected by multiple vulnerabilities as referenced in the 202208stable-channel-update-for-desktop16 advisory. - Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101...

Debian: Security Advisory (DLA-2855-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2855

CVE-2020-2855 affects Oracle iSupport (Admin) within Oracle E-Business Suite versions 12.1.1–12.1.3. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise iSupport, with exploitation requiring user interaction (UI:REQUIRED) and potential impact beyond iSu...

CVE-2019-2855

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2019-2855

CVE-2019-2855 affects the Oracle Outside In Technology component (Outside In Filters) used by Oracle Fusion Middleware, with the Rational DOORS Next Generation 6.0.6.1 product line explicitly listed as affected. The Red Hat IBM bulletin confirms the vulnerability details and specifies remediation...

CVE-2018-2855

The CVE-2018-2855 entry concerns Oracle Financial Services Basel Regulatory Capital Basic (subcomponent: Portfolio, Attribution) in Oracle Financial Services Applications, affected in version 8.0.x. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to gain unauthor...

CVE-2016-2855

Huawei Mobile Broadband HL Service (Windows) 22.001.25.00.03 and earlier is vulnerable to a DLL side-loading attack via a weak ACL on the MobileBrServ data directory, allowing local unprivileged users to modify VERSION.dll and gain SYSTEM privileges. This is a local privilege escalation; exploita...

CVE-2016-2855

creationtimestamp| type| source ---|---|--- 2016-05-15 10:16:36+00:00| published-proof-of-concept| https://t.me/HackerOne/113...

Huawei Mobile Broadband HL Service 22.001.25.00.03 Local Privilege Escalation

Huawei Mobile Broadband HL Service Local Privilege Escalation Metadata =================================================== Release Date: 12-05-2016 Author: Florian Bogner @ Kapsch BusinessCom AG https://www.kapsch.net/kbc Affected versions: up to the current 22.001.25.00.03 on x86 and x64 Tested...

Ubuntu 14.04 LTS : Samba regression (USN-2855-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2855-2 advisory. USN-2855-1 fixed vulnerabilities in Samba. The upstream fix for CVE-2015-5252 introduced a regression in certain specific environments. This update fixes the...

Ubuntu: Security Advisory (USN-2855-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2010-0221)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2855

CVE-2015-2855 affects Blue Coat SSL Visibility Appliance WebUI on SV800/SV1800/SV2800/SV3800 (3.6.x–3.8.x before 3.8.4). The issue is that the administrator cookie in HTTPS sessions does not set the Secure flag, allowing an attacker to capture the cookie by intercepting its transmission in an HTT...

SA96 : SSL Visibility Appliance Web-based Vulnerabilities

SUMMARY The SSL Visibility Appliance is susceptible to multiple web-based vulnerabilities in the administration console. The console is accessible only through the dedicated administration port. A remote attacker can use these vulnerabilities to obtain administrative access to the SSL Visibility...

Blue Coat SSL Visibility Appliance contains multiple vulnerabilities

Overview Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800, versions 3.6.x to 3.8.3, contain multiple vulnerabilities. Description Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800, versions 3.6.x to 3.8.3, contain multiple vulnerabilities.CWE-352: Cross-Site...

openSUSE Security Update : Rsync (openSUSE-SU-2014:0595-1)

Rsync was updated to fix a denial of service attack that could be used by remote attackers without authentification CVE-2014-2855. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...