99 matches found
CVE-2018-3679
Intel Data Center Manager SDK (before 5.1) is affected by CVE-2018-3679. The issue is a privilege-escalation in the Reference UI that could allow an unauthorized remote unauthenticated user to potentially execute code with administrator privileges. The Intel advisory states CVSS v3.0 base score 9...
CVE-2018-3679
Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges...
Intel® Data Center Manager SDK Advisory
Summary: Potential security vulnerability in Intel® Data Center Manager SDK may allow privilege escalation. Intel is releasing Intel® Data Center Manager updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-3679 Description: Escalation of privilege in Reference ...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : QEMU update (USN-3679-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3679-1 advisory. Ken Johnson and Jann Horn independently discovered that microprocessors utilizing speculative execution of a memory read may allow...
CVE-2011-3679
CVE-2011-3679 entry is rejected and not used.
Debian DSA-3679-1 : jackrabbit - security update
Lukas Reschke discovered that Apache Jackrabbit, an implementation of the Content Repository for Java Technology API, did not correctly check the Content-Type header on HTTP POST requests, enabling Cross-Site Request Forgery CSRF attacks by malicious websites. %NASLMINLEVEL 70300 C Tenable Networ...
Ubuntu 14.04 LTS / 16.04 LTS : Oxide vulnerabilities (USN-2955-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2955-1 advisory. A use-after-free was discovered when responding synchronously to permission requests. An attacker could potentially exploit this to cause a...
openSUSE: Security Advisory for Chromium (openSUSE-SU-2016:1059-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for Chromium (important)
Chromium was updated to 49.0.2623.110 to fix the following security issues: - CVE-2016-1646: Out-of-bounds read in V8 - CVE-2016-1647: Use-after-free in Navigation - CVE-2016-1648: Use-after-free in Extensions - CVE-2016-1649: Buffer overflow in libANGLE - CVE-2016-1650: Various fixes from intern...
openSUSE: Security Advisory for Chromium (openSUSE-SU-2016:0929-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for Chromium (important)
Chromium was updated to 49.0.2623.110 to fix the following security issues: - CVE-2016-1646: Out-of-bounds read in V8 - CVE-2016-1647: Use-after-free in Navigation - CVE-2016-1648: Use-after-free in Extensions - CVE-2016-1649: Buffer overflow in libANGLE - CVE-2016-1650: Various fixes from intern...
Security update for Chromium (important)
Chromium was updated to 49.0.2623.110 to fix the following security issues: - CVE-2016-1646: Out-of-bounds read in V8 - CVE-2016-1647: Use-after-free in Navigation - CVE-2016-1648: Use-after-free in Extensions - CVE-2016-1649: Buffer overflow in libANGLE - CVE-2016-1650: Various fixes from intern...
openSUSE Security Update : Chromium (openSUSE-2016-418)
Chromium was updated to 49.0.2623.110 to fix the following security issues : - CVE-2016-1646: Out-of-bounds read in V8 - CVE-2016-1647: Use-after-free in Navigation - CVE-2016-1648: Use-after-free in Extensions - CVE-2016-1649: Buffer overflow in libANGLE - CVE-2016-1650: Various fixes from...
CVE-2016-3679
CVE-2016-3679 covers multiple vulnerabilities in Google V8 (pre-4.9.385.33) as used by Chromium/Chrome (before 49.0.2623.108). The documented impact per NVD is possible denial-of-service and other effects. OpenSUSE/Nessus references indicate Chromium patching to 4.9.385.33 (Chrome 49.0.2623.108) ...
CVE-2015-3679
CVE-2015-3679 affects Apple Type Services (ATS) in OS X prior to 10.10.4, where processing a crafted font file could allow a remote attacker to trigger memory corruption and execute arbitrary code or cause a crash. The vulnerability is tied to ATS font handling and is listed among multiple CVEs r...
CVE-2014-3679
CVE-2014-3679 affects the Jenkins Monitoring plugin prior to 1.53.0. The issue is an information-disclosure flaw where certain Monitoring plugin pages are accessible to remote attackers, allowing them to obtain sensitive information. Affected: Jenkins Monitoring plugin (pre-1.53.0). Root cause: p...
jenkins: multiple issues
SECURITY-87/CVE-2014-3661 anonymous DoS attack through CLI handshake This vulnerability allows unauthenticated users with access to Jenkins' HTTP/HTTPS port to mount a DoS attack on Jenkins through thread exhaustion. - SECURITY-110/CVE-2014-3662 User name discovery Anonymous users can test if the...
FreeBSD : jenkins -- remote execution, privilege escalation, XSS, password exposure, ACL hole, DoS (549a2771-49cc-11e4-ae2c-c80aa9043978)
Jenkins Security Advisory : Please reference CVE/URL list for details %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors Redistribution an...