106 matches found
CVE-2016-4093
Technical details for CVE-2016-4093 are not publicly available in the provided documents. Monitor for updates.
CVE-2016-1063
Technical details for CVE-2016-1063 are not publicly provided in the connected documents. The supplied sources do not specify affected products, versions, root cause, or remediation beyond the general description. Monitor for updates.
CVE-2015-4093
Cross-site scripting XSS vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-4093
Cross-site scripting XSS vulnerability in Elasticsearch Kibana 4.x before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-4093
Elasticsearch Kibana 4.x prior to 4.0.3 is vulnerable to cross-site scripting (XSS). The vulnerability is described as allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected product is Kibana 4.x; the issue stems from an XSS flaw in versions before 4.0....
Kibana vulnerability CVE-2015-4093
Summary: Kibana versions 4.0.0, 4.0.1 and 4.0.2 are vulnerable to a cross-site scripting XSS attack. The attack allows execution of arbitrary JavaScript in the context of the user’s browser. We have been assigned CVE-2015-4093 for this issue. Fixed versions: Versions 4.0.3 and 4.1.0 have addresse...
Kibana Cross-Site Scripting Vulnerability CVE-2015-4093
Summary: Kibana versions 4.0.0, 4.0.1 and 4.0.2 are vulnerable to a cross-site scripting XSS attack. The attack allows execution of arbitrary JavaScript in the context of the user’s browser. We have been assigned CVE-2015-4093 for this issue. Fixed versions: Version 4.0.3 has addressed the...
CVE-2014-4093
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4084...
Memory corruption
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-4093...
CVE-2014-4093
CVE-2014-4093 affects Microsoft Internet Explorer 10. Description: memory corruption vulnerability in IE10 that can allow remote attackers to execute arbitrary code or cause a denial of service when a user visits a crafted web site (distinct from CVE-2014-4084). Connected sources reiterate IE10 m...
openSUSE Security Update : net6 (openSUSE-SU-2012:0008-1)
this update fixes an information disclosure and a connection hijacking vulnerability CVE-2011-4091, CVE-2011-4093. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update net6-5585. The text descripti...
openSUSE Security Update : net6 (openSUSE-SU-2012:0008-1)
this update fixes an information disclosure and a connection hijacking vulnerability CVE-2011-4091, CVE-2011-4093. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update net6-5585. The text descripti...
CVE-2011-4093
CVE-2011-4093 concerns libnet6 (net6) before version 1.3.14, where an integer overflow in inc/server.hpp could allow remote attackers to hijack connections and escalate privileges by exhausting descriptors and supplying the ID of another user. Public documents confirm the affected component (inc/...
CVE-2012-4093
CVE-2012-4093 affects Cisco Unified Computing System (UCS) Manager. The issue is due to improper input validation in the Smart Call Home contact address, allowing an authenticated, local attacker to trigger a denial of service. Exploitation requires local access and valid credentials; the impact ...
Oracle Linux 4 : kernel (ELSA-2006-0617 / ELSA-2006-0689)
Updated kernel packages that fix security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These new kernel packages contain fixes for the security...
CVE-2013-4093
CVE-2013-4093 affects Imperva SecureSphere SOM 9.0.0.5 (Management Server). The vulnerability allows remote attackers to leak sensitive information through two paths: (1) direct access to dwr/call/plaincall/AsyncOperationsContainer.getOperationState.dwr reveals the installation path in s0.filePat...
CVE-2013-4093
The SecureSphere Operations Manager SOM Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to obtain sensitive information via 1 a direct request to dwr/call/plaincall/AsyncOperationsContainer.getOperationState.dwr, which reveals the installation path in the s0.filePath...
Fedora 14 : net6-1.3.14-1.fc14 (2011-15332)
http://permalink.gmane.org/gmane.network.obby.announce/50 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Fedora 15 : net6-1.3.14-1.fc15 (2011-15326)
http://permalink.gmane.org/gmane.network.obby.announce/50 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Fedora 16 : net6-1.3.14-1.fc16 (2011-15363)
http://permalink.gmane.org/gmane.network.obby.announce/50 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...