112 matches found
Critical: Red Hat Security Advisory: flash-plugin security update
An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Microsoft IE And Microsoft Edge Multiple Flash Player Vulnerabilities (4018483)
This host is missing a critical security update according to Microsoft security updates April 2017. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Adobe Flash Player for Mac <= 25.0.0.127 Multiple Vulnerabilities (APSB17-10)
The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 25.0.0.127. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code...
CVE-2016-3060
IBM Financial Transaction Manager (FTM) exposes CVE-2016-3060 across multiple components (ACH, Check, CPS). The vulnerability allows remote authenticated attackers to hijack user click actions via a crafted site (clickjacking). Affected versions include FTM CPS v2.1.1.0–v2.1.1.3 and FTM 3.0.0.x u...
Ubuntu 14.04 LTS / 16.04 LTS : GD library vulnerabilities (USN-3060-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3060-1 advisory. It was discovered that the GD library incorrectly handled certain malformed TGA images. If a user or automated system were tricked into...
Ubuntu: Security Advisory (USN-3060-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Adobe Acrobat and Reader API Calls Code Execution (APSB15-10: CVE-2015-3062; CVE-2015-3060)
A remote code execution vulnerability has been reported in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe Reader handles certain API functions, that could lead to bypass restrictions. A remote attacker can exploit this issue by enticing a target user to open a specially craft...
Adobe Reader Multiple Vulnerabilities - 01 (May 2015) - Mac OS X
Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...
Adobe Reader < 10.1.14 / 11.0.11 Multiple Vulnerabilities (APSB15-10)
The version of Adobe Reader installed on the remote host is a version prior to 10.1.14 / 11.0.11. It is, therefore, affected by the following vulnerabilities : - A buffer overflow condition exists in CoolType.dll due to improper validation of user-supplied input. A remote attacker can exploit thi...
Design/Logic Flaw
Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on JavaScript API execution via unspecified vectors, a different vulnerability than CVE-2015-3060, CVE-2015-3061, CVE-2015-3062, CVE-2015-3063, CVE-2015-3064,...
CVE-2015-3060
Technical details about CVE-2015-3060 are not provided in the connected documents; no affected products, root cause, or fixes are disclosed. Monitor for updates.
Debian DSA-3060-1 : linux - security update
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service : - CVE-2014-3610 Lars Bull of Google and Nadav Amit reported a flaw in how KVM handles noncanonical writes to certain MSR registers. A privileged guest user can exploit this flaw to cause a deni...
Debian: Security Advisory (DSA-3060-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-3060
The CVE-2014-3060 issue affects IBM WebSphere DataPower XC10 Appliance Version 2.5, where the Administrative Console could allow an attacker to gain administrative access by capturing a session cookie (via access to an eXtreme Scale distributed ObjectGrid network). The IBM Security Bulletin cites...
openSUSE Security Update : chromium (openSUSE-SU-2012:0492-1)
Security update for Chromium and V8 to 18.0.1025.142. Following bugs are listed in the Chrome changelog : - $500 109574 Medium CVE-2011-3058: Bad interaction possibly leading to XSS in EUC-JP. Credit to Masato Kinugawa. - $500 112317 Medium CVE-2011-3059: Out-of-bounds read in SVG text handling...
Important: Red Hat Security Advisory: Fuse MQ Enterprise 7.1.0 update
Fuse MQ Enterprise 7.1.0 roll up patch 1, which fixes multiple security issues and various bugs, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...
Apache ActiveMQ WEB控制台 远程拒绝服务或信息泄露漏洞(CVE-2013-3060)
CVE ID:CVE-2013-3060 Apache ActiveMQ是一款开源消息总线，支持JMS1.1和J2EE 1.4规范的JMS Provider实现。 Apache ActiveMQ WEB控制台无需验证，允许远程攻击者利用漏洞提交HTTP请求获得敏感信息或进行拒绝服务攻击。 0 Apache ActiveMQ 5.8.0之前版本 厂商解决方案 Apache ActiveMQ 5.8.0已经修复此漏洞，建议用户下载更新： https://activemq.apache.org/...
CVE-2012-3060
CVE-2012-3060 affects Cisco Unity Connection (UC) versions 8.6, 9.0, and 9.5. The vulnerability allows remote attackers to cause a denial of service by sending malformed UDP packets, leading to CPU consumption. The underlying cause is malformed UDP handling in UC that triggers high CPU usage. Pub...
FreeBSD Ports: chromium
The remote host is missing an update to the system as announced in the referenced advisory. VID b8f0a391-7910-11e1-8a43-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID b8f0a391-7910-11e1-8a43-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
