77 matches found
Google Chrome < 108.0.5359.124 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 108.0.5359.124. It is, therefore, affected by multiple vulnerabilities as referenced in the 202212stable-channel-update-for-desktop13 advisory. - Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allow...
Oracle Linux 8 : gnome-software / and / fwupd (ELSA-2020-4436)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4436 advisory. - Add signing with redhatsecureboot503 cert Related: CVE-2020-10713 - Security fix for CVE-2020-10759 Tenable has extracted the preceding description block...
RHEL 8 : gnome-software and fwupd (RHSA-2020:4436)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4436 advisory. The gnome-software packages contain an application that makes it easy to add, remove, and update software in the GNOME desktop. The appstream-data...
Ubuntu 16.04 LTS / 18.04 LTS : librsvg regression (USN-4436-2)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4436-2 advisory. USN-4436-1 fixed a vulnerability in librsvg. The upstream fix caused a regression when parsing certain SVG files. This update backs out the fix pendin...
Ubuntu: Security Advisory (USN-4436-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-4436
CVE-2020-4436 affects IBM Aspera applications. The issue is a buffer overflow after valid authentication that could allow an attacker with system knowledge to execute arbitrary code via a service. Impact is described as high (C/H/I/H/A/H) in IBM and NVD records. The IBM bulletin lists affected IB...
Debian DSA-4436-1 : imagemagick - security update
This update fixes two vulnerabilities in Imagemagick: Memory handling problems and missing or incomplete input sanitising may result in denial of service, memory disclosure or the execution of arbitrary code if malformed TIFF or Postscript files are processed. C Tenable Network Security, Inc. The...
CVE-2018-4436
CVE-2018-4436 involves a certificate validation issue in configuration profiles on Apple devices. Affected products/versions include iOS, tvOS, and watchOS prior to versions 12.1.1, 12.1.1, and 5.1.2 respectively. Root cause (per the sources) is improper certificate validation within configuratio...
Security Bulletin: IBM Sterling Order Management is affected by Apache Struts 2 security vulnerabilities (CVE-2016-3093 , CVE-2016-4436)
Summary IBM Sterling Order Management uses Apache Struts 2 and is affected by some of the vulnerabilities that exist in Apache Struts 2 Vulnerability Details CVEID: CVE-2016-3093 DESCRIPTION: Apache Struts is vulnerable to a denial of service, caused by the improper implementation of cache used t...
CVE-2015-4436
CVE-2015-4436 is rejected/not used and does not represent an active vulnerability entry.
Apache Struts Unspecified Vulnerability (S2-035) - Linux
Apache Struts is prone to an unspecified vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Apache Struts Security Update (S2-035)
Apache Struts is prone to an unspecified vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...
CVE-2016-4436
Summary of CVE-2016-4436 : Apache Struts 2 is affected by an unspecified impact vulnerability due to improper action name cleanup. The CVE entry covers versions 2.3. before 2.3.29 and 2.5.x before 2.5.1. Connected IBM and IBM-related advisories explicitly reference this CVE and reiterate that upg...
CVE-2016-4436
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...
CVE-2014-4436
IOHIDFamily in Apple OS X before 10.10 allows attackers to cause denial of service out-of-bounds read operation via a crafted application...
CVE-2014-4436
IOHIDFamily in Apple macOS OS X before 10.10 is vulnerable to an out-of-bounds read in its handling of key-mapping properties, allowing a crafted application to trigger denial of service. The CVE entry CVE-2014-4436 explicitly documents this IOHIDFamily issue and is listed among multiple related ...
CVE-2014-4436
IOHIDFamily in Apple OS X before 10.10 allows attackers to cause denial of service out-of-bounds read operation via a crafted application...
Fedora 20 : salt-0.17.1-1.fc20 (2013-19438)
Update to bugfix release 0.17.1. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...