CVE-2016-3213

The Web Proxy Auto Discovery WPAD protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 9 through 11 has an improper fallback mechanis...

CVE-2016-3213

CVE-2016-3213 covers WPAD Elevation of Privilege in Windows where WPAD proxy discovery falls back to a NetBIOS name response, enabling privilege escalation via spoofed NetBIOS WPAD responses. Exploitation hinges on NetBIOS name queries for WPAD; attacker can respond to NetBIOS requests to influen...

Patched BadTunnel Windows Bug Has 'Extensive' Impact

Among the more than three dozen vulnerabilities Microsoft patched on Tuesday was a fix for a bug that the researcher who found it said has “probably the widest impact in the history of Windows.” “There were also some wide impact vulnerabilities before, but maybe not like this extensive,” Chinese...

BadTunnel: the impact of Win95 to Win10“Super-vulnerability”with CVE-2 0 1 6-3 2 1 3-the vulnerability warning-the black bar safety net

! Yesterday, Microsoft released a high-risk vulnerability patch the vulnerability by Tencent basaltic laboratory Creator to Yang Chinese circle of safety person of the TK, the leader of the Find, and named it“BadTunnel”, is currently the Windows history of the most wide-reaching vulnerabilities,...

Microsoft Internet Explorer Multiple Vulnerabilities (3163649)

This host is missing a critical security update according to Microsoft Bulletin MS16-063. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

KLA10829 Multiple vulnerabilities in Microsoft Edge and Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Edge. Malicious users can exploit these vulnerabilities to bypass security restrictions, perform privilege escalation, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper...

MS16-063: Cumulative Security Update for Internet Explorer (3163649)

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3163649. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these issues by...

USN-2914-1 OpenSSL vulnerabilities | Cloud Foundry

USN-2914-1 OpenSSL vulnerabilities Low Vendor Ubuntu, OpenSSL Versions Affected Ubuntu 14.04 LTS SSLv1 Description Several security issues were fixed in OpenSSL. Yuval Yarom, Daniel Genkin, and Nadia Heninger discovered that OpenSSL was vulnerable to a side-channel attack on modular exponentiatio...

CVE-2015-3213

The gesture handling code in Clutter before 1.16.2 allows physically proximate attackers to bypass the lock screen via certain 1 mouse or 2 touch gestures...

DEBIAN-CVE-2015-3213

The gesture handling code in Clutter before 1.16.2 allows physically proximate attackers to bypass the lock screen via certain 1 mouse or 2 touch gestures...

UBUNTU-CVE-2015-3213

The gesture handling code in Clutter before 1.16.2 allows physically proximate attackers to bypass the lock screen via certain 1 mouse or 2 touch gestures...

CVE-2015-3213

CVE-2015-3213 affects GNOME Clutter prior to 1.16.2; the gesture handling code can allow a nearby attacker to bypass the lock screen via specific mouse or touch gestures. The issue is locally exploitable with a high impact (C/C/I/A) as reported by NVD (base score 7.2). A fix was developed (GNOME ...

CentOS Update for clutter CESA-2015:1510 centos7

Check the version of clutter SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882232";...

RedHat Update for clutter RHSA-2015:1510-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : clutter on SL7.x x86_64 (20150727)

A flaw was found in the way clutter processed certain mouse and touch gestures. An attacker could use this flaw to bypass the screen lock. CVE-2015-3213 After installing the update, all applications using clutter must be restarted for the update to take effect. %NASLMINLEVEL 70300 C Tenable Netwo...

clutter security update

CentOS Errata and Security Advisory CESA-2015:1510 Updated clutter packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...

Oracle Linux 7 : clutter (ELSA-2015-1510)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1510 advisory. 1.14.4-12.1 - Fix crash when doing gestures at unlock screen Resolves: rhbz1227103 Tenable has extracted the preceding description block directly from the Oracl...

RHEL 7 : clutter (RHSA-2015:1510)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:1510 advisory. Clutter is a library for creating fast, visually rich, graphical user interfaces. Clutter is used for rendering the GNOME desktop environment. A flaw...

Moderate: Red Hat Security Advisory: clutter security update

Updated clutter packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fro...

Debian DSA-3213-1 : arj - security update

Multiple vulnerabilities have been discovered in arj, an open source version of the arj archiver. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-0556 Jakub Wilk discovered that arj follows symlinks created during unpacking of an arj archive. A remo...