CVE-2014-4151

CVE-2014-4151 affects AlienVault OSSIM prior to 4.8.0. The av-centerd SOAP service is vulnerable to a set_file handling flaw that allows a remote, unauthenticated attacker to write arbitrary files and execute arbitrary code with root privileges. The issue stems from inadequate input sanitization ...

Moderate: Red Hat Security Advisory: qemu-kvm-rhev security update

Updated qemu-kvm-rhev packages that fix several security issues are now available for Red Hat Enterprise Virtualization. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Adobe Reader PDF File Invalid Value Code Execution (APSB12-16; CVE-2012-4151)

A remote code execution vulnerability has been reported in Adobe Acrobat and Reader...

Adobe Reader < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16) (Mac OS X)

The version of Adobe Reader installed on the remote Mac OS X host is prior to 10.1.4 or 9.5.2. It is, therefore, affected by the following vulnerabilities : - An unspecified stack-based buffer overflow condition exists that allows an attacker to execute arbitrary code. CVE-2012-2049 - An...

Adobe Acrobat < 10.1.4 / 9.5.2 Multiple Vulnerabilities (APSB12-16)

The version of Adobe Acrobat installed on the remote host is earlier than 10.1.4 / 9.5.2 and is, therefore, affected by multiple vulnerabilities : - An unspecified stack-based buffer overflow error exists. CVE-2012-2049 - An unspecified buffer overflow error exists. CVE-2012-2050 - Numerous...

Memory corruption

Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-2051, CVE-2012-4147, CVE-2012-4148, CVE-2012-4149,...

CVE-2012-4151

CVE-2012-4151 affects Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and macOS; described as memory corruption allowing arbitrary code execution or DoS via unspecified vectors. Connected Nessus entries indicate patch not available from vendor for affected Linux distri...

Gentoo Security Advisory GLSA 201201-13 (mit-krb5)

The remote host is missing updates announced in advisory GLSA 201201-13. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Fedora Update for krb5 FEDORA-2011-14650

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-4151

The krb5db2lockoutaudit function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8 through 1.8.4, when the db2 aka Berkeley DB back end is used, allows remote attackers to cause a denial of service assertion failure and daemon exit via unspecified vectors, a different vulnerabilit...

CVE-2011-4151

The krb5db2lockoutaudit function in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.8 through 1.8.4, when the db2 aka Berkeley DB back end is used, allows remote attackers to cause a denial of service assertion failure and daemon exit via unspecified vectors, a different vulnerabilit...

CVE-2011-4151

CVE-2011-4151 affects MIT Kerberos 5 (krb5) in KDC when using the db2 (Berkeley DB) backend; the krb5_db2_lockout_audit path allows remote attackers to trigger a denial of service (assertion failure and daemon exit). Connected documents confirm this issue is with the Berkeley DB backend and note ...

CVE-2010-4151

SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033...

CVE-2010-4151

The CVE-2010-4151 entry corresponds to an SQL injection in DeluxeBB 1.3 (and possibly earlier) affecting misc.php, triggered when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to manipulate the xthedateformat parameter in a register action and execute arbitrary SQL comma...

DeluxeBB 'xthedateformat' Parameter SQL Injection Vulnerability

DeluxeBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

Debian DSA-1944-1 : request-tracker3.4 request-tracker3.6 - session hijack

Mikal Gule discovered that request-tracker, an extensible trouble-ticket tracking system, is prone to an attack, where an attacker with access to the same domain can hijack a user's RT session. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Fedora Core 12 FEDORA-2009-12783 (rt3)

The remote host is missing an update to rt3 announced via advisory FEDORA-2009-12783. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 12 : rt3-3.8.4-7.fc12 (2009-12783)

Fri Dec 4 2009 Ralf Corsepius - 3.8.4-7 - Add rt-3.8.4-rh-bz543962.diff BZ 543962. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Core 11 FEDORA-2009-12827 (rt3)

The remote host is missing an update to rt3 announced via advisory FEDORA-2009-12827. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 10 FEDORA-2009-12817 (rt3)

The remote host is missing an update to rt3 announced via advisory FEDORA-2009-12817. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...