60 matches found
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : SQLite vulnerabilities (USN-4394-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4394-1 advisory. It was discovered that SQLite incorrectly handled certain corruped schemas. An attacker could possibly use this issue to cause a...
CVE-2019-4394
IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 contain APIs that could be used by a local user to send email. IBM X-Force ID: 162232...
CVE-2019-4394
CVE-2019-4394 affects IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise (versions 2.4, 2.4.0.x, and 2.5, 2.5.0.x). The issue arises from APIs that local users can abuse to send email, enabling potential abuse within the affected system. The IBM security bulletin confirms mitigation via...
Security Bulletin: IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise Edition is affected by ASoC vulnerability (CVE-2019-4394)
Summary IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise has addressed the ASoC vulnerability. Vulnerability Details CVEID: CVE-2019-4394 DESCRIPTION: IBM Cloud Orchestrator contain APIs that could be used by a local user to send email. CVSS Base Score: 2.3 CVSS Temporal Score: See fo...
Multiple IBM Products CVE-2019-4394 Local Security Vulnerability
Description Multiple IBM Products are prone to a local security vulnerability. Successfully exploiting this issue will allow attackers to perform unauthorized actions; this may aid in launching further attacks. Technologies Affected IBM Cloud Orchestrator 2.4 IBM Cloud Orchestrator 2.4.0.1 IBM...
CVE-2018-4394
The CVE-2018-4394 entry describes a memory corruption issue that was addressed with improved input validation. Affected products/versions include iOS versions prior to 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1, and iTunes 12.9.1. Connected Apple advisories map this CVE to the Security Co...
Debian DSA-4394-1 : rdesktop - security update
Multiple security issues were found in the rdesktop RDP client, which could result in denial of service, information disclosure and the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...
Debian: Security Advisory (DSA-4394-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple iTunes < 12.9.1 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209197 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
Apple TV < 12.1 Multiple Vulnerabilities
According to its banner, the version of Apple TV on the remote device is prior to 12.1. It is, therefore, affected by multiple vulnerabilities as described in the HT209194 security advisory. Note that only 4th generation devices are affected by these vulnerabilities. C Tenable Network Security,...
Apple iTunes < 12.9.1 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.9.1. It is, therefore, affected by multiple vulnerabilities as referenced in the HT209197 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
Apple iTunes Multiple Vulnerabilities (HT209197) - Windows
Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...
CVE-2017-4394
CVE-2017-4394 entry is rejected/not used and does not represent an active vulnerability.
CVE-2016-4394
HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue...
CVE-2016-4394
HP System Management Homepage (SMH) vulnerable to CVE-2016-4394: an HSTS bypass allows remote attackers to obtain sensitive information on SMH versions prior to 7.6. The connected OpenVAS/NVT entries corroborate an HSTS-related disclosure vulnerability affecting HP SMH, but detailed technical spe...
CVE-2015-4394
The CVE-2015-4394 issue affects the Drupal Services module (7.x-3.x) prior to 7.x-3.12, where an improper field_access check allows remote attackers to disclose private field information. The vulnerability is tied to the Services module’s handling of entity field access, enabling information expo...
Fedora Update for drupal6 FEDORA-2015-4394
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-4394
CVE-2014-4394 affects Apple OS X up to 10.9.5 due to an unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem that does not properly validate calls. This can enable arbitrary code execution in a privileged context via a crafted application. Root cause: improper val...
CVE-2014-4401
The CVE concerns Apple OS X prior to 10.9.5 and the Intel Graphics Driver subsystem. It describes an unspecified integrated graphics driver routine that does not properly validate calls, allowing arbitrary code execution in a privileged context via a crafted application. The impact is a local cod...