Sierra Wireless AirLink ES450 ACEManager template_load.cgi Information Disclosure

Talos Vulnerability Report TALOS-2018-0752 Sierra Wireless AirLink ES450 ACEManager templateload.cgi Information Disclosure Vulnerability April 25, 2019 CVE Number CVE-2018-4067 Summary An exploitable information disclosure vulnerability exists in the ACEManager templateload.cgi functionality of...

CVE-2017-4067

...

CVE-2017-4067

CVE-2017-4067 entry is rejected/not used and does not represent an active vulnerability entry.

Dell NetVault Backup 10.0.x < 10.0.5 RCE

The Dell NetVault Backup installed on the remote host is version 10.0.x prior to 10.0.5. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the libnv6 module due to an integer overflow condition. A remote attacker, by manipulating a serialized object's template strin...

CVE-2015-4067

Integer overflow in the libnv6 module in Dell NetVault Backup before 10.0.5 allows remote attackers to execute arbitrary code via crafted template string specifiers in a serialized object, which triggers a heap-based buffer overflow...

CVE-2015-4067

Dell NetVault Backup (libnv6) is affected by an integer overflow in the handling of serialized object template string specifiers, causing a heap-based buffer overflow that enables remote arbitrary code execution. Affected products/versions: Dell NetVault Backup before 10.0.5. Exploit scenario: re...

RHEL 5 : rhev-hypervisor (RHSA-2011:1408)

An updated rhev-hypervisor package that fixes several security issues is now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each...

Microsoft Internet Explorer Multiple Vulnerabilities (2976627)

This host is missing a critical security update according to Microsoft Bulletin MS14-051. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-4067

Affected product: Microsoft Internet Explorer 10 and 11. Vulnerability: memory corruption leading to remote code execution or DoS when visiting a crafted site (multiple variants). Root cause / details: not fully disclosed in the provided materials beyond “memory corruption via crafted web site.” ...

Fedora Update for eucalyptus FEDORA-2013-6117

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : eucalyptus-3.2.2-1.fc18 (2013-6117)

Eucalyptus 3.2.1 contained two vulnerabilities related to its Walrus object store. The first CVE-2012-4067 was a parsing vulnerability which could allow a Denial of Service attack, and the second CVE-2013-2296 allowed unauthorized authenticated users to enable and access bucket activity logs. The...

CVE-2013-4067

IBM InfoSphere Information Server affected versions: 8.0, 8.1, 8.5 (FP3), 8.7, and 9.1. Affected component: Web Console/session handling leading to possible session hijack and cookie reading; attacker could also phish credentials. Root cause cited as insufficient safeguards around session/cookie ...

CVE-2012-4067

CVE-2012-4067 affects Eucalyptus Walrus prior to version 3.2.2. A crafted XML message containing a DTD can trigger a denial-of-service by exhausting memory, threads, and CPU resources, demonstrated via a bucket-logging request. Related entries also reference CVE-2013-2296. Multiple connected sour...

Oracle Linux 5 : kernel (ELSA-2011-1386)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1386 advisory. - Revert: xen passthrough: block VT-d MSI trap injection Paolo Bonzini 716301 716302 CVE-2011-1898 - net bridge: fix use after free in brdeliver Amerig...

Slackware Advisory SSA:2008-269-01 mozilla-firefox

The remote host is missing an update as announced via advisory SSA:2008-269-01. OpenVAS Vulnerability Test $Id: esoftslkssa200826901.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware Advisory SSA:2008-270-01 mozilla-thunderbird

The remote host is missing an update as announced via advisory SSA:2008-270-01. OpenVAS Vulnerability Test $Id: esoftslkssa200827001.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2008-269-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : thunderbird on SL4.x, SL5.x i386/x86_64

Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running Thunderbird. CVE-2008-0016, CVE-2008-4058, CVE-2008-4059, CVE-2008-4060,...

Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey. CVE-2008-0016, CVE-2008-4058, CVE-2008-4059, CVE-2008-4060, CVE-2008-4061, CVE-2008-40...

(RHSA-2011:1408) Moderate: rhev-hypervisor security update

The rhev-hypervisor package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine KVM hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red...