85 matches found
HPE Storage Sizer Remote Arbitrary Code Execution Vulnerability
HPE Storage Sizer is prone to remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2016-4377
HPE Smart Update in Storage Sizing Tool before 13.0, Converged Infrastructure Solution Sizer Suite CISSS before 2.13.1, Power Advisor before 7.8.2, Insight Management Sizer before 16.12.1, Synergy Planning Tool before 3.3, SAP Sizing Tool before 16.12.1, Sizing Tool for SAP Business Suite powered...
CVE-2016-4377
CVE-2016-4377 is linked to multiple OpenVAS entries describing a remote arbitrary code execution vulnerability across several HPE sizing and planning tools (e.g., Sizer for SAP Business Suite, Sizer for Exchange/SharePoint/Skype, CISSS, Insight Management Sizer, Synergy Planning Tool, ConvergedSy...
Apple IOS PDF Reader Parsing Memory Corruption (CVE-2014-4377)
A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...
Gentoo Security Advisory GLSA 201408-17
Gentoo Linux Local Security Checks GLSA 201408-17 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
CVE-2015-4377
Cross-site scripting XSS vulnerability in unspecified administration pages in the Petition module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with the "create petition" permission to inject arbitrary web script or HTML via unknown vectors...
CVE-2015-4377
CVE-2015-4377 describes a Cross-site scripting (XSS) vulnerability in the Drupal Petition module (6.x-1.x) prior to 6.x-1.3. The issue affects the module’s administration pages and can be triggered by remote authenticated users who have the create petition permission, allowing injection of arbitr...
Petition - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-081
The Petition module enables you to create petitions which users may sign. The module doesn't sufficiently sanitize user supplied text in some administration pages, thereby exposing a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role...
CVE-2014-4377
CVE-2014-4377 affects Apple iOS prior to 8 and Apple TV prior to 7. It is a CoreGraphics memory corruption in PDF handling: specifically an integer overflow in the Indexed color space processing of PDFs that can trigger a heap overflow via a controlled allocation path (x_calloc) and a follow-on m...
Updated qemu package fixes security vulnerability
Sibiao Luo discovered that QEMU incorrectly handled device hot-unplugging. A local user could possibly use this flaw to cause a denial of service CVE-2013-4377. Additionally, qemu has been updated to 1.6.2, fixing several other bugs...
Ubuntu: Security Advisory (USN-2092-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-2092-1: QEMU vulnerabilities
Asias He discovered that QEMU incorrectly handled SCSI controllers with more than 256 attached devices. A local user could possibly use this flaw to elevate privileges. CVE-2013-4344 It was discovered that QEMU incorrectly handled Xen disks. A local guest could possibly use this flaw to consume...
CVE-2013-4377
CVE-2013-4377 is a use-after-free in QEMU’s virtio-pci implementation (affecting QEMU 1.4.0–1.6.0). A local user could trigger a daemon crash by hot-unplugging a virtio device. The vulnerability is documented across multiple advisories (e.g., Mageia MGASA-2014-0060) which note that upgrading QEMU...
CVE-2011-4377
This CVE entry is rejected/not used and does not represent an active vulnerability.
FreeBSD Ports: mediawiki
The remote host is missing an update to the system as announced in the referenced advisory. VID 7c0fecd6-f42f-11e1-b17b-000c2977ec30 OpenVAS Vulnerability Test $ Description: Auto generated from VID 7c0fecd6-f42f-11e1-b17b-000c2977ec30 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...
FreeBSD Ports: mediawiki
The remote host is missing an update to the system as announced in the referenced advisory. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...
Scientific Linux Security Update : wireshark on SL3.x, SL4.x, SL5.x i386/x86_64
An invalid pointer dereference flaw was found in the Wireshark SMB and SMB2 dissectors. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark. CVE-2009-4377 Several buffer overflow flaw...
CentOS Update for wireshark CESA-2010:0360 centos5 i386
Check for the Version of wireshark OpenVAS Vulnerability Test CentOS Update for wireshark CESA-2010:0360 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...
SuSE 11 Security Update : wireshark (SAT Patch Number 2082)
This update of wireshark fixes : - Remote attackers could potentially trigger a buffer overflow in the Daintree SNA file parser. CVE-2009-4376 - Specially crafted packets could cause the SMB and SMB2 dissector to crash wireshark. CVE-2009-4377 - Unspecified vulnerability in the Infiniband dissect...