80 matches found
macOS 10.13.x < 10.13.6 Multiple Vulnerabilities
The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6. It is, therefore, affected by multiple vulnerabilities. Note that successful exploitation of the most serious issues can result in arbitrary code execution. C Tenable Network Security, Inc...
Hancom Hangul Office HShow!NXDeleteLineObj+0x53692 Code Execution Vulnerability(CVE-2016-4291)
Description This vulnerability was discovered within the Hangul HShow application which is part of the Hangul Office Suite. Hangul Office is published by Hancom, Inc. and is considered one of the more popular Office suites used within South Korea. When opening a Hangul HShow Document .hpt and...
CVE-2010-4291
CVE-2010-4291 is rejected/not used as explicitly stated in the Initial Description.
CVE-2016-4291
CVE-2016-4291 affects Hancom Hangul Office 2014 VP (Hangul HShow). A structure field in an HShow document (.hpt) can cause an integer overflow during a size calculation, leading to an undersized heap allocation. Subsequent reads write beyond the allocated buffer, enabling code execution in the Ha...
freenet.de XSS vulnerability
Vulnerable URL: http://www.freenet.de/feed/start/horoskop/horoskop.html?jsoncallback=" Details: Description| Value ---|--- Patched:| Yes, at 17.11.2016 Latest check for patch:| 17.11.2016 15:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4291 VIP website...
Hancom Hangul Office HShow!NXDeleteLineObj+0x53692 Code Execution Vulnerability
Talos Vulnerability Report TALOS-2016-0146 Hancom Hangul Office HShow!NXDeleteLineObj+0x53692 Code Execution Vulnerability August 4, 2016 CVE Number CVE-2016-4291 Description This vulnerability was discovered within the Hangul HShow application which is part of the Hangul Office Suite. Hangul...
Oracle: Security Advisory (ELSA-2013-0125)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux: Security Advisory (ALAS-2013-251)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-4291
CVE-2015-4291 affects Cisco IOS XE Software on ASR 1000 Series (2.x before 2.4.3 and 2.5.x before 2.5.1). The vulnerability lies in the ESP’s handling of fragmented IPv4/IPv6 packets, where crafted fragmentation can cause the Embedded Services Processor to crash. Impact observed as a denial of se...
Design/Logic Flaw
Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292,...
CVE-2014-4291
Technical details for CVE-2014-4291 are not provided in the connected documents. The EUVD entries reference malware unrelated to this CVE. Monitor for updates from official advisories.
openSUSE Security Update : wireshark (openSUSE-SU-2012:1035-1)
wireshark was updated to 1.4.15 - The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-13 CVE-2012-4285 - The XTP dissector could go into an infinite loop. wnpa-sec-2012-15 CVE-2012-4288 - The AFP dissector could go into a large loop. wnpa-sec-2012-17 CVE-2012-4289 - The RTPS2...
openSUSE Security Update : wireshark (openSUSE-SU-2012:1067-1)
Wireshark was updated to 1.8.2 : - The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-13 CVE-2012-4285 - The MongoDB dissector could go into a large loop. wnpa-sec-2012-14 CVE-2012-4287 - The XTP dissector could go into an infinite loop. wnpa-sec-2012-15 CVE-2012-4288 - The ERF...
Amazon Linux AMI : wireshark (ALAS-2013-251)
Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark. CVE-2013-3559 , CVE-2013-4083 Several denial of service flaws were found in Wireshark. Wireshar...
SuSE 11.3 Security Update : libvirt (SAT Patch Number 8421)
libvirt has been updated to the 1.0.5.6 stable release that fixes bugs and security issues : - Fix crash in remoteDispatchDomainMemoryStats. CVE-2013-4296 - virBitmapParse out-of-bounds read access Libvirt on SLES 11 SP3 is not affected:. CVE-2013-5651 - Add support for using 3-arg pkcheck syntax...
Fedora Update for libvirt FEDORA-2013-17305
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : libvirt-1.0.5.6-2.fc19 (2013-17618)
Fix snapshot restore when VM has disabled usb support bz 1011520 - Rebased to version 1.0.5.6 - Fix blockjobinfo python API bz 999077 - CVE-2013-4311: Insecure polkit usage bz 1009539, bz 1005332 - CVE-2013-4296: Invalid free memory stats bz 1006173, bz 1009667 - CVE-2013-4291: Supplementary...
Fedora Update for libvirt FEDORA-2013-17618
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for libvirt FEDORA-2013-17618
Check for the Version of libvirt OpenVAS Vulnerability Test Fedora Update for libvirt FEDORA-2013-17618 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...