80 matches found
Apple iTunes < 12.10.5 Multiple Vulnerabilities (uncredentialed check) (HT211105)
The version of Apple iTunes installed on the remote Windows host is prior to 12.10.5. It is, therefore, affected by multiple vulnerabilities as referenced in the HT211105 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported versio...
Apple iTunes < 12.10.5 Multiple Vulnerabilities (credentialed check) (HT211105)
The version of Apple iTunes installed on the remote Windows host is prior to 12.10.5. It is, therefore, affected by multiple vulnerabilities as referenced in the HT211105 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported versio...
About the security content of iCloud for Windows 7.18
About the security content of iCloud for Windows 7.18 This document describes the security content of iCloud for Windows 7.18. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
About the security content of Safari 13.1
About the security content of Safari 13.1 This document describes the security content of Safari 13.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
CVE-2011-3901
creationtimestamp| type| source ---|---|--- 2020-02-12 22:37:18+00:00| seen| https://t.me/cibsecurity/9799...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1636)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 1799-2] linux security update
Package : linux Version : 3.16.68-1 CVE ID : CVE-2018-5995 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-2024 CVE-2019-3459 CVE-2019-3460 CVE-2019-3882 CVE-2019-3901 CVE-2019-6133 CVE-2019-9503 CVE-2019-11091 CVE-2019-11190 CVE-2019-11486 CVE-2019-11599 Debian Bug : 927781 Several...
CVE-2019-3901
CVE-2019-3901 describes a race condition in perf_event_open() that can leak data from setuid processes. The root cause is that cred_guard_mutex is not held during the ptrace_may_access() check, allowing a target task to execve() with setuid execution before perf_event_alloc() attaches, bypassing ...
Ubuntu: Security Advisory (USN-3901-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3901-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3901-1 advisory. Jann Horn discovered that the userfaultd implementation in the Linux kernel did not properly restrict access to certain ioctls. A local attacker could us...
Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3901-2)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3901-2 advisory. USN-3901-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux...
Debian DSA-3901-1 : libgcrypt20 - security update
Daniel J. Bernstein, Joachim Breitner, Daniel Genkin, Leon Groot Bruinderink, Nadia Heninger, Tanja Lange, Christine van Vredendaal and Yuval Yarom discovered that Libgcrypt is prone to a local side-channel attack allowing full key recovery for RSA-1024. See https://eprint.iacr.org/2017/627 for...
Debian: Security Advisory (DSA-3901-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-3901
CVE-2013-3901 is associated with MS13-089 and is described in connected advisories as a remote code execution vulnerability in the Windows Graphical Device Interface (GDI) caused by an integer overflow. The linked sources name the affected component as GDI; no specific vulnerable product versions...
CVE-2016-3901
CVE-2016-3901 affects the Qualcomm cryptographic engine driver (drivers/crypto/msm/qcedev.c) in Android. It describes multiple integer overflows that enable a local privilege escalation via a crafted application on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices. Root cause is integer overfl...
holidaycheck.de XSS vulnerability
Vulnerable URL: https://www.holidaycheck.de/Hotelinfo.html?action=hotelinfolightbox=10676=reviewspicturesvideospictures'-alert/OPENBUGBOUNTY/-' Details: Description| Value ---|--- Patched:| Yes, at 06.07.2016 Latest check for patch:| 06.07.2016 20:09 GMT Vulnerability type:| XSS Vulnerability...
holidaycheck.de XSS vulnerability
Vulnerable URL: https://www.holidaycheck.de/holidaycheck-award?xwx" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3901 VIP website status:| Yes Check holidaycheck.de SSL connection:| Grade: A Coordinated...
CVE-2014-3901
CVE-2014-3901 affects Dominion KX2-101 (Raritan Japan) switches prior to version 2. A crafted packet can cause a DoS/device hang. Public sources (NVD, JVN) confirm vulnerability in the KX2-101 line with upgrade guidance: move to Dominion KX2-101 V2 to remediate. No exploitation details are provid...
