99 matches found
CVE-2011-2972
CVE-2011-2972 is rejected/not used and does not represent an active vulnerability entry.
beritasatu.com XSS vulnerability
Vulnerable URL: http://www.beritasatu.com/pages/member/sign.php?form=signup'"--!=430=true Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2972 VIP website status:| Yes Check beritasatu.com SSL connection:| Grade:...
CVE-2017-2972
Adobe Acrobat Reader (versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier) contains a memory corruption vulnerability in the image conversion module related to JPEG parsing. Successful exploitation could lead to arbitrary code execution. The connected sources confirm ...
CentOS Update for vim-common CESA-2016:2972 centos7
Check the version of vim-common SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882616";...
RedHat Update for vim RHSA-2016:2972-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 6 / 7 : vim (ELSA-2016-2972)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2972 advisory. 7.4.629-5.1 - add fix for CVE-2016-1248 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
Ubuntu: Security Advisory (USN-2933-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : Exim vulnerabilities (USN-2933-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2933-1 advisory. It was discovered that Exim incorrectly filtered environment variables when used with the perlstartup configuration option. If the perlstartup option was...
CVE-2015-2972
Thetis is a Sysphonic Thetis (Thetis groupware) vulnerability (CVE-2015-2972) involving SQL injection (CWE-89) in Thetis before 2.3.0. Affected component: Thetis software; root cause: insecure handling of SQL queries allowing remote attackers to execute arbitrary SQL via unspecified vectors. Impa...
Amazon Linux AMI : exim (ALAS-2014-395)
expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI...
DEBIAN-CVE-2014-2972
expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value...
CVE-2014-2972
expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value...
CVE-2014-2972
The CVE-2014-2972 issue affects Exim prior to 4.83, where expand.c expands mathematical comparisons twice. This allows a local attacker to gain privileges or execute arbitrary commands via a crafted lookup value. Public advisories (Ubuntu USN-2933-1, Gentoo GLSA-201607-12) describe fixes/upgrades...
Low: exim
Issue Overview: expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value. Affected Packages: exim Issue Correction: Run yum update exim or yum update --advisory ALAS-2014-395 to updat...
openSUSE Security Update : exim (openSUSE-SU-2014:0983-1)
"Changes in exim : - Silence static checkers; beo1506. - update to 4.83 This release of Exim includes one incompatible fix : + the behavior of expansion of arguments to math comparison functions , was unexpected, expanding the values twice; CVE-2014-2972; bnc888520 This release contains the...
Fedora Update for exim FEDORA-2014-8803
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : exim-4.80.1-4.fc19 (2014-8803)
Security fix for CVE-2014-2972 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Fedora 20 : exim-4.80.1-7.fc20 (2014-8865)
Security fix for CVE-2014-2972 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Debian DSA-2972-1 : linux - security update
Andy Lutomirski discovered that the ptrace syscall was not verifying the RIP register to be valid in the ptrace API on x8664 processors. An unprivileged user could use this flaw to crash the kernel resulting in denial of service or for privilege escalation. %NASLMINLEVEL 70300 C Tenable Network...