CVE-2016-8362

CVE-2016-8362 affects Moxa OnCell OnCellG3470A-LTE and a wide range of AWK/WAC/TAP models. The issue is described as Improper Authentication that allows any user to download log files by accessing a specific URL, with an attack scenario that does not require authentication. Impact in the public a...

Ubuntu 14.04 LTS / 16.04 LTS : ImageMagick vulnerabilities (USN-3131-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3131-1 advisory. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were...

CVE-2015-3131

Adobe Flash Player and AIR products are affected by a use-after-free vulnerability (CVE-2015-3131) that could allow arbitrary code execution. Affected ranges include Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows/OS X, and before 11.2.202.481 on Linux; Adobe AIR...

CVE-2015-3127

Technical details (affected products, versions, impact, or exploit information for CVE-2015-3127) are not provided in the supplied connected documents. Monitor for updates.

CVE-2015-3129

Technical details about CVE-2015-3129 are not provided in the supplied documents; no affected products, vulnerable components, impact, or remediation are disclosed. Monitor for official updates.

CVE-2015-4430

Technical details about CVE-2015-4430 are not publicly provided in the supplied connected documents. The CIRCL/Nessus entries reference related CVEs but do not disclose affected products, root cause, or remediation for this specific ID. Monitor for updates.

Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt47

3:11-alt47 built July 8, 2015 Sergey V Turchin in task 146142 July 8, 2015 Sergey V Turchin - new version - security fixes: CVE-2014-0578, CVE-2015-3097, CVE-2015-3114, CVE-2015-3115, CVE-2015-3116, CVE-2015-3117, CVE-2015-3118, CVE-2015-3119, CVE-2015-3120, CVE-2015-3121, CVE-2015-3122,...

Adobe Flash Player Use-After-Free Vulnerability (Jul 2015) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Debian DSA-3131-1 : xdg-utils - security update

John Houwer discovered a way to cause xdg-open, a tool that automatically opens URLs in a user's preferred application, to execute arbitrary commands remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Debian: Security Advisory (DSA-3131-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 5 : rhev-hypervisor (RHSA-2011:1408)

An updated rhev-hypervisor package that fixes several security issues is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each...

Oracle Solaris Critical Patch Update : jul2012_SRU8_5

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Kernel/NFS. The supported version that is affected is 11. Easily exploitable vulnerability requiring logon to Operating Syste...

openSUSE Security Update : seamonkey (seamonkey-3372)

This update brings Mozilla SeaMonkey to version 2.0.9, fixing various bugs and security issues. The following security issues were fixed: MFSA 2010-49 / CVE-2010-3169: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-3154)

Mozilla Thunderbird 3.0 was updated to version 3.0.7, fixing various bugs and security issues. Following security issues were fixed: MFSA 2010-49 / CVE-2010-3169: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based...

CVE-2014-3131

CVE-2014-3131 affects SAP Solution Manager 7.1 through SAP Profile Maintenance, where access rights are not properly restricted. This allows remote authenticated users to obtain sensitive information via an unspecified RFC function. The available records indicate the vulnerability stems from inad...

Debian Security Advisory DSA 2582-1 (xen - several vulnerabilities)

Multiple denial of service vulnerabilities have been discovered in the Xen Hypervisor. One of the issue CVE-2012-5513 could even lead to privilege escalation from guest to host. Some of the recently published Xen Security Advisories XSA 25 and 28 are not fixed by this update and should be fixed i...

Microsoft .NET Framework Array Access Violation (MS13-052; CVE-2013-3131; CVE-2013-3134)

A remote code execution vulnerability exists in the way the .NET Framework handles multidimensional arrays of small structures. The vulnerability is caused when the .NET Framework improperly handles multidimensional arrays of small structures. An attacker who successfully exploited this...

Oracle Linux 5 : kernel (ELSA-2011-1386)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1386 advisory. - Revert: xen passthrough: block VT-d MSI trap injection Paolo Bonzini 716301 716302 CVE-2011-1898 - net bridge: fix use after free in brdeliver Amerig...

Microsoft Silverlight Remote Code Execution Vulnerabilities (2861561) - Mac OS X

This host is missing a critical security update according to Microsoft Bulletin MS13-052. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2013-3131

CVE-2013-3131 concerns a remote code execution vulnerability in Microsoft .NET Framework and Silverlight due to improper handling of multidimensional arrays of small structures. Affected products include .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 prior to 5.1.20513.0. The r...