90 matches found
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : ImageMagick vulnerabilities (USN-3681-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3681-1 advisory. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using...
Ubuntu: Security Advisory (USN-3681-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-3681-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-3681-1 : wordpress - security update
Several vulnerabilities were discovered in wordpress, a web blogging tool, which could allow remote attackers to compromise a site via cross-site scripting, cross-site request forgery, path traversal, or bypass restrictions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...
CVE-2016-3681
CVE-2016-3681: Buffer overflow in Huawei Mate 8 Wi-Fi driver (NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, NXT-TL before NXT-TL00C01B182) allows a crafted application to cause a denial of service (crash) or possibly gain privileges. Root cause: lack...
Jenkins Multiple Vulnerabilities (Oct 2014) - Windows
Jenkins is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:jenkins:jenkins"; ifdescription...
Oracle: Security Advisory (ELSA-2010-0825)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-3681
CVE-2015-3681 affects Apple Type Services (ATS) in OS X versions prior to 10.10.4. It allows remote code execution or memory corruption via a crafted font file. The issue is addressed in OS X Yosemite 10.10.4 / Security Update 2015-005, which lists ATS CVEs 2015-3679 through 2015-3682 as addresse...
CVE-2015-3681
Apple Type Services ATS in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-3679, CVE-2015-3680, and CVE-2015-3682...
CVE-2014-3681
Cross-site scripting XSS vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-3681
CVE-2014-3681 is a cross-site scripting (XSS) vulnerability in Jenkins prior to 1.583 and in the LTS line prior to 1.565.3. The available sources describe that remote attackers can inject arbitrary web script or HTML via unspecified vectors, potentially affecting the Jenkins web interface. The co...
FreeBSD : jenkins -- remote execution, privilege escalation, XSS, password exposure, ACL hole, DoS (549a2771-49cc-11e4-ae2c-c80aa9043978)
Jenkins Security Advisory : Please reference CVE/URL list for details %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019 Jacques Vidrine and contributors Redistribution an...
jenkins: multiple issues
SECURITY-87/CVE-2014-3661 anonymous DoS attack through CLI handshake This vulnerability allows unauthenticated users with access to Jenkins' HTTP/HTTPS port to mount a DoS attack on Jenkins through thread exhaustion. - SECURITY-110/CVE-2014-3662 User name discovery Anonymous users can test if the...
Oracle Linux 6 : mysql (ELSA-2011-0164)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0164 advisory. 5.1.52-1.1 - Update to MySQL 5.1.52, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html including numerous small...
Oracle Linux 5 : mysql (ELSA-2010-0825)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0825 advisory. - Add fixes for CVE-2010-3677, CVE-2010-3680, CVE-2010-3681, CVE-2010-3682, CVE-2010-3833, CVE-2010-3835, CVE-2010-3836, CVE-2010-3837, CVE-2010-3838,...
Oracle Linux 4 : mysql (ELSA-2010-0824)
From Red Hat Security Advisory 2010:0824 : Updated mysql packages that fix three security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whi...
Scientific Linux Security Update : mysql on SL6.x i386/x86_64
The MySQL PolyFromWKB function did not sanity check Well-Known Binary WKB data, which could allow a remote, authenticated attacker to crash mysqld. CVE-2010-3840 A flaw in the way MySQL processed certain JOIN queries could allow a remote, authenticated attacker to cause excessive CPU use up to...
CVE-2012-3681
CVE-2012-3681 affects WebKit as used in Apple Safari prior to 6.0. The vulnerability allows remote attackers to execute arbitrary code or cause a memory corruption and application crash via a crafted website. This is listed among Safari/WebKit CVEs; remediation is updating Safari to version 6.0 o...