112 matches found
Debian: Security Advisory (DSA-3898-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-3898
Telephony in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows attackers to cause a denial of service loss of locked-screen 911 TTY functionality via a crafted application that modifies the TTY mode by broadcasting an intent, aka internal bug...
CVE-2016-3898
CVE-2016-3898 affects Android Telephony: a crafted application can modify TTY mode by broadcasting an intent, triggering a denial of service that disrupts locked-screen 911 TTY functionality. Affected versions include Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 ...
Bonita BPM < 6.5.3 Multiple Vulnerabilities
Bonita BPM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:bonitasoft:bonitabpm"; if...
Arbitrary File Disclosure and Open Redirect in Bonita BPM
Advisory ID: HTB23259 Product: Bonita BPM Vendor: Bonitasoft Vulnerable Versions: 6.5.1 and probably prior Tested Version: 6.5.1 Windows and Mac OS packages Advisory Publication: May 7, 2015 without technical details Vendor Notification: May 7, 2015 Vendor Patch: June 9, 2015 Public Disclosure:...
Bonita BPM 6.5.1 Directory Traversal / Open Redirect
Advisory ID: HTB23259 Product: Bonita BPM Vendor: Bonitasoft Vulnerable Versions: 6.5.1 and probably prior Tested Version: 6.5.1 Windows and Mac OS packages Advisory Publication: May 7, 2015 without technical details Vendor Notification: May 7, 2015 Vendor Patch: June 9, 2015 Public Disclosure:...
Bonita BPM 6.5.1 - Multiple Vulnerabilities
Bonita BPM 6.5.1 - Multiple Vulnerabilities Advisory ID: HTB23259 Product: Bonita BPM Vendor: Bonitasoft Vulnerable Versions: 6.5.1 and probably prior Tested Version: 6.5.1 Windows and Mac OS packages Advisory Publication: May 7, 2015 without technical details Vendor Notification: May 7, 2015...
CVE-2015-3898
creationtimestamp| type| source ---|---|--- 2015-06-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37260...
Bonita BPM 6.5.1 Directory Traversal / Open Redirect Vulnerabilities
Exploit for php platform in category web applications Product: Bonita BPM Vendor: Bonitasoft Vulnerable Versions: 6.5.1 and probably prior Tested Version: 6.5.1 Windows and Mac OS packages Advisory Publication: May 7, 2015 without technical details Vendor Notification: May 7, 2015 Vendor Patch:...
Bonita BPM 6.5.1 - Multiple Vulnerabilities
Advisory ID: HTB23259 Product: Bonita BPM Vendor: Bonitasoft Vulnerable Versions: 6.5.1 and probably prior Tested Version: 6.5.1 Windows and Mac OS packages Advisory Publication: May 7, 2015 without technical details Vendor Notification: May 7, 2015 Vendor Patch: June 9, 2015 Public Disclosure:...
CVE-2014-3898
CVE-2014-3898 affects Fujitsu ServerView Operations Manager (V5.00.09–V6.30.05). It is a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary scripts via unspecified vectors, potentially executing in the user’s browser. Remediation guidance in connected sources a...
Microsoft Hyper-V Privilege Elevation Vulnerability (2893986)
This host is missing an important security update according to Microsoft Bulletin MS13-092. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2013-3898
CVE-2013-3898 concerns a memory-address validity issue in Microsoft Hyper-V on Windows 8/Windows Server 2012. The vulnerability allows guest OS users to execute arbitrary code in all guest OS instances or to cause a denial-of-service by crashing the host, via a guest-to-host hypercall with a craf...
Gentoo Security Advisory GLSA 201111-05 (chromium v8)
The remote host is missing updates announced in advisory GLSA 201111-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Google Chrome Multiple Vulnerabilities - November11 (Mac OS X)
The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov11macosx.nasl 7044 2017-09-01 11:50:59Z teissa $ Google Chrome Multiple Vulnerabilities - November11 Mac OS X Authors: Rachana Shetty Copyright: Copyright c...
CVE-2011-3898
CVE-2011-3898 affects Google Chrome (Chromium) prior to 15.0.874.120 when using JRE 7, where applet execution proceeds without user confirmation. Public sources (Gentoo GLSA 201111-05) call for upgrading Chromium to >=15.0.874.121 and V8 to >=3.5.10.24; OpenVAS/Gentoo entries corroborate mu...
Stable Channel Update
The Stable channel has been updated to 15.0.874.120 for Windows, Mac, Linux and Chrome Frame platforms All Updated V8 - 3.5.10.23 Fix small print sizing issues issues: 102186, 82472, 102154 This new build also contains a new version of Flash which contains security fixes. Release Notes Mac Fixed...
CVE-2010-3898
CVE-2010-3898 affects IBM OmniFind Enterprise Edition 8.x and 9.x. The issue is that administrator (ESAdmin) cookies do not have a properly restricted cookie path, which may allow remote attackers to bypass authentication by accessing other pages within the web site. The connected documents confi...
CVE-2009-3898
The CVE-2009-3898 issue affects nginx (Engine X) in the WebDAV module (src/http/modules/ngx_http_dav_module.c). A directory traversal flaw via the Destination header in COPY or MOVE can allow remote authenticated users to create or overwrite arbitrary files. Affected versions are nginx before 0.7...
CVE-2009-3898
Directory traversal vulnerability in src/http/modules/ngxhttpdavmodule.c in nginx aka Engine X before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. dot dot in the Destination HTTP header for the WebDAV 1 COPY or 2 MOVE method...