63 matches found
CVE-2019-3851
CVE-2019-3851 affects Moodle prior to 3.6.3 and 3.5.5, where the Boost theme’s secure layout contains a link to the site home that allows users (e.g., students) to navigate out of the current page. The available connected documents consistently describe this as an unauthorized navigation issue, e...
Ubuntu: Security Advisory (USN-3851-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-3851
In Hyland Perceptive Document Filters 11.4.0.2647 - x86/x64 Windows/Linux, an exploitable stack-based buffer overflow exists in the DOC-to-HTML conversion functionality of the Hyland Perceptive Document Filters version 11.4.0.2647. A crafted .doc document can lead to a stack-based buffer, resulti...
CVE-2018-3851
CVE-2018-3851 affects Hyland Perceptive Document Filters 11.4.0.2647 (Windows/Linux). The vulnerability is a heap/stack issue in the DOC-to-HTML/Microsoft Word XML/CDATA conversion pipeline, where an out-of-bounds write during a CDATA/text extraction can cause a memcpy overrun, leading to remote ...
Solaris 10 (sparc) : 120094-35
X11 6.6.2: xscreensaver patch. Date this patch was last updated by Sun : Apr/14/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Debian DSA-3851-1 : postgresql-9.4 - security update
Several vulnerabilities have been found in the PostgreSQL database system : - CVE-2017-7484 Robert Haas discovered that some selectivity estimators did not validate user privileges which could result in information disclosure. - CVE-2017-7485 Daniel Gustafsson discovered that the PGREQUIRESSL...
Cisco Application-Hosting Framework Directory Traversal Vulnerability
A vulnerability in the web framework code of the Cisco application-hosting framework CAF component of the Cisco IOx application environment could allow an unauthenticated, remote attacker to read any file from the CAF in the virtual instance running on the affected device. SPDX-FileCopyrightText:...
CVE-2017-3851
CVE-2017-3851 is a directory-traversal vulnerability in Cisco IOx CAF: unauthenticated remote attacker can read files from the CAF web interface within the virtual instance. Affected Cisco IOx CAF versions: 1.0.0.0 and 1.1.0.0. Exploitation involves crafting requests to the CAF web interface; imp...
CVE-2016-3851
The LG Electronics bootloader Android before 2016-08-05 on Nexus 5X devices allows attackers to gain privileges by leveraging access to a privileged process, aka internal bug 29189941...
CVE-2016-3851
CVE-2016-3851 concerns an elevation-of-privilege issue in the LG Electronics bootloader on Nexus 5X devices. The vulnerability arises when a compromised privileged process can be leveraged to gain higher privileges within the system. Public details confirm this is a local escalation risk affectin...
Oracle: Security Advisory (ELSA-2007-0705)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2011-0586)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-3851
The CVE-2014-3851 entry concerns Pyplate 0.08, where passwd.db is stored with world-readable permissions. This allows local users to read the administrator password from the file, revealing a risk to confidentiality via improper file permissions in usr/lib/cgi-bin/create_passwd_file.py. The avail...
CVE-2013-3851
CVE-2013-3851 affects Microsoft Office 2003 SP3/2007 SP3, Word 2003 SP3/2007 SP3, Office Compatibility Pack SP3, and Word Viewer. The vulnerability is a memory corruption flaw triggered by a crafted Office document, enabling remote code execution or a denial of service. The OpenVAS/Vulnerability ...
MS13-072: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2845537)
The remote Windows host is running a version of Microsoft Office, Microsoft Word, Office Compatibility Pack, or Microsoft Word Viewer that is affected by the following remote code execution vulnerabilities : - A remote code execution vulnerability exists due to the way the XML parser used by Word...
RHEL 6 : libguestfs (RHSA-2011:0586)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0586 advisory. libguestfs is a library for accessing and modifying guest disk images. libguestfs relied on the format auto-detection in QEMU rather than allowing th...
Scientific Linux Security Update : libguestfs on SL6.x x86_64
libguestfs is a library for accessing and modifying guest disk images. libguestfs relied on the format auto-detection in QEMU rather than allowing the guest image file format to be specified. A privileged guest user could potentially use this flaw to read arbitrary files on the host that were...
RedHat Update for libguestfs RHSA-2011:0586-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
RedHat Update for libguestfs RHSA-2011:0586-01
Check for the Version of libguestfs OpenVAS Vulnerability Test RedHat Update for libguestfs RHSA-2011:0586-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...