84 matches found
RHEL 7 : kernel-rt (RHSA-2016:2584)
"An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Ubuntu: Security Advisory (USN-3083-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-3083-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-3083-2: Linux kernel (Trusty HWE) vulnerabilities
USN-3083-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. Dmitry Vyukov discovered that the IPv6 implementation in the Linux kernel did not...
USN-3083-1: Linux kernel vulnerabilities
Dmitry Vyukov discovered that the IPv6 implementation in the Linux kernel did not properly handle options data, including a use-after-free. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2016-3841 It was discovered that a race...
CVE-2016-3841
CVE-2016-3841 affects the Linux kernel IPv6 stack before 4.3.3. A crafted sendmsg can mishandle options data, allowing local users to gain privileges or cause a denial of service via a use-after-free leading to a system crash. Public documents (e.g., MiracleLinux AXSA-2016-1135:09 and Unity Linux...
CVE-2014-3841
The CVE-2014-3841 issue affects the WordPress Contact Bank Plugin (pre-2.0.20). The vulnerability is a stored/reflected XSS via the Label field tied to the plugin’s form layout configuration, allowing remote attackers to inject arbitrary script/HTML. Root cause: improper handling of input in the ...
CVE-2014-3841
Cross-site scripting XSS vulnerability in the Contact Bank plugin before 2.0.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Label field, related to form layout configuration. NOTE: some of these details are obtained from third party information...
CVE-2013-3841
Oracle Siebel CRM 8.1.1.x and 8.2.2.x are affected by CVE-2013-3841 in the Siebel Core - EAI (Web Services) component. The vulnerability is described as an unspecified issue that allows remote attackers to affect confidentiality via Web Services vectors. The connected Nessus/CPU notes reference m...
KLA10232 ACE vulnerability in KMPlayer
An untrusted path vulnerability was found in KMPlayer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited locally via dll hijacking. Original advisories - Related products KMPlayer CVE list CVE-2012-3841 critical Solution Update to...
CVE-2011-3841
The CVE-2011-3841 entry concerns the WordPress WP Symposium plugin vulnerability: a Cross-Site Scripting (XSS) flaw in the file uploadify/get_profile_avatar.php that allows arbitrary script/HTML injection via the uid parameter. Affected versions are before 11.12.08. Root cause: input handling in ...
CVE-2010-3841
Multiple cross-site scripting XSS vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via 1 the rev parameter to the view script or 2 the query string to the login script...
CVE-2010-3841
CVE-2010-3841 affects TWiki prior to 5.0.1 via lib/TWiki.pm, enabling remote XSS by crafted input (the rev parameter in view and query string in login). Affected component is the TWiki web app; root cause is insufficient input sanitization allowing script/HTML injection. Documented impact: remote...
[security bulletin] HPSBMA02456 SSRT090188 rev.1 - HP Discovery & Dependency Mapping Inventory (DDMI) Running on Windows, Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01861595 Version: 1 HPSBMA02456 SSRT090188 rev.1 - HP Discovery & Dependency Mapping Inventory DDMI Running on Windows, Remote Execution of Arbitrary Code NOTICE: The information in this Security...
CVE-2009-3841
HP Discovery & Dependency Mapping Inventory (DDMI) running on Windows versions 2.5x, 7.5x, and 7.60 is affected by CVE-2009-3841. The HP Security Bulletin SSRT090188 rev.1 states a remote execution of arbitrary code by an authorized user, with the base CVSS 2.0 score of 9.0. Patched versions are ...
CVE-2008-3841
Technical details about CVE-2008-3841 are not publicly available in the provided connected documents. The initial description notes an XSS in Freeway eCommerce 1.4.1.171, but no vendor/versions/impact/fix are elaborated here. Monitor for updates.
CVE-2007-3841
Unspecified vulnerability in Pidgin formerly Gaim 2.0.2 for Linux allows remote authenticated users, who are listed in a users list, to execute certain commands via unspecified vectors, aka ZD-00000035. NOTE: this information is based upon a vague advisory by a vulnerability information sales...
CVE-2007-3841
PIDGIN 2.0.2 on Linux has an unspecified vulnerability (CVE-2007-3841) that could allow remote authenticated users listed in a users list to execute certain commands via unspecified vectors. The connected documents provide no concrete technical details, affected components, root cause, exploit st...