118 matches found
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3605)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3605 advisory. - dentry name snapshots Al Viro Orabug: 26630936 CVE-2017-7533 - KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings David...
AZL-34914 CVE-2017-3605 affecting package libdb for versions less than 5.3.28-7
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
AZL-6617 CVE-2017-3605 affecting package libdb for versions less than 5.3.28-7
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
CVE-2017-3605
CVE-2017-3605 affects the Data Store component of Oracle Berkeley DB. Affected are versions prior to 6.2.32; exploitation requires an authenticated user on the infrastructure and user interaction, potentially leading to Data Store takeover. Public references in multiple feeds (NVD/SUSE/Tenable) c...
CVE-2017-3605
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
Debian DSA-3605-1 : libxslt - security update
Several vulnerabilities were discovered in libxslt, an XSLT processing runtime library, which could lead to information disclosure or denial-of-service application crash against an application using the libxslt library. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
EnjoySAP SAP GUI ActiveX Control Buffer Overflow
No description provided by source. $Id: enjoysapguipreparetoposthtml.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...
CVE-2011-3605
The processrs function in the router advertisement daemon radvd before 1.8.2, when UnicastOnly is enabled, allows remote attackers to cause a denial of service temporary service hang via a large number of NDROUTERSOLICIT requests...
CVE-2011-3605
CVE-2011-3605 affects radvd (router advertisement daemon). The issue occurs in process_rs when UnicastOnly is enabled, where an attacker can cause a denial-of-service (temporary service hang) by sending a flood of ND_ROUTER_SOLICIT requests. Affected software is radvd prior to version 1.8.2. The ...
CVE-2013-3605
Cross-site request forgery CSRF vulnerability in Coursemill Learning Management System LMS 6.6 allows remote attackers to hijack the authentication of arbitrary users via vectors related to cookies...
Cross site request forgery (csrf)
Coursemill Learning Management System LMS 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via vectors related to cookies, a different vulnerability than CVE-2013-3605...
CVE-2013-3605
CVE-2013-3605 concerns Cross-site request forgery (CSRF) in Coursemill Learning Management System (LMS) 6.6, enabling remote attackers to hijack the authentication of arbitrary users via cookies. The connected documents corroborate that the vulnerability involves cookie-related CSRF in the Course...
CVE-2013-3605
Cross-site request forgery CSRF vulnerability in Coursemill Learning Management System LMS 6.6 allows remote attackers to hijack the authentication of arbitrary users via vectors related to cookies...
CVE-2012-3605
CVE-2012-3605 is a WebKit/Apple Safari vulnerability affecting Safari prior to 6.0, where memory corruption could allow remote code execution or cause a crash via a crafted web site. The connected data confirms the issue as a WebKit memory‑corruption class vulnerability, with the recommended reme...
Docebo LMS 3605 SQL Injection
TITLE ....... Docebo LMS docebo3605.zip DATE ........ 15.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.docebo.com VERSION ..... docebo3605.zip TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2. What is the ty...
Fedora Update for radvd FEDORA-2011-13989
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Debian Security Advisory DSA 2323-1 (radvd)
The remote host is missing an update to radvd announced via advisory DSA 2323-1. OpenVAS Vulnerability Test $Id: deb23231.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2323-1 radvd Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
Debian: Security Advisory (DSA-2323-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE 10 Security Update : radvd (ZYPP Patch Number 7824)
This update of radvd fixes multiple buffer overread flaws in the processra function that could have potentially lead to crashes CVE-2011-3604. Additionally, a temporary Denial of Service flaw that could be triggered with a flood of NDROUTERSOLICIT has been fixed. CVE-2011-3605 %NASLMINLEVEL 70300...