79 matches found
CVE-2018-4161
CVE-2018-4161 concerns WebKit in Apple's iOS (≤11.3), Safari (≤11.1), iCloud/iTunes on Windows, tvOS, watchOS. It allows remote code execution or memory corruption causing app crash via a crafted website; root cause is memory corruption in WebKit. Affected products are Apple devices using WebKit/...
macOS : Apple Safari < 11.1 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208695 security advisory. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108805;...
CVE-2018-4161
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...
Apple iTunes < 12.7.4 WebKit Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.7.4. It is, therefore, affected by multiple vulnerabilities in WebKit as referenced in the HT208694 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-report...
Debian DSA-4161-1 : python-django - security update
James Davis discovered two issues in Django, a high-level Python web development framework, that can lead to a denial-of-service attack. An attacker with control on the input of the django.utils.html.urlize function or django.utils.text.Truncator's chars and words methods could craft a string tha...
CVE-2017-4161
CVE-2017-4161 is rejected/not used and does not represent an active vulnerability entry.
Microsoft IE And Microsoft Edge Flash Player Multiple Vulnerabilities (3157993)
This host is missing a critical security update according to Microsoft Bulletin MS16-064. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Memory corruption
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1096,...
UBUNTU-CVE-2016-4161
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1096,...
Memory corruption
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1096,...
Memory corruption
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1096,...
CVE-2016-4161
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1096,...
Memory corruption
Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-1096,...
CVE-2016-4161
Technical details for CVE-2016-4161 are not publicly disclosed in the provided documents. No affected products, versions, vulnerabilities, or fixes are described here. Monitor for updates from the connected sources.
Google Chrome < 50.0.2661.102 Multiple Vulnerabilities
Binary data 9371.pasl...
CVE-2015-4161
SAP Afaria is affected by an information-disclosure vulnerability where access to unspecified functionality is not properly restricted (via the Services feature). A remote attacker could obtain sensitive information, and potentially gain privileges, with other unspecified impacts noted in SAP Sec...
Fedora Update for gksu-polkit FEDORA-2013-13616
Check for the Version of gksu-polkit OpenVAS Vulnerability Test Fedora Update for gksu-polkit FEDORA-2013-13616 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Fedora 18 : gksu-polkit-0.0.3-8.gitf8ce834c.fc18 (2013-13616)
Recreate tarball from proper sources; previous package was shipping an unknown code tarball. - Add proper patching for CVE-2012-5617/CVE-2013-4161, the previous fix was creating a patch file and not patching the code. - Use proper bus name in service file to fix service timeout. Note that Tenable...
Fedora 19 : gksu-polkit-0.0.3-8.gitf8ce834c.fc19 (2013-13620)
Recreate tarball from proper sources; previous package was shipping an unknown code tarball. - Add proper patching for CVE-2012-5617/CVE-2013-4161, the previous fix was creating a patch file and not patching the code. - Use proper bus name in service file to fix service timeout. Note that Tenable...