206 matches found
CVE-2014-4476
WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different...
CVE-2014-4476
CVE-2014-4476 affects WebKit as used in Apple iOS pre-8.1.3, Apple Safari versions prior to 6.2.3, 7.x prior to 7.1.3, and 8.x prior to 8.0.3, and Apple TV prior to 7.0.3. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and appli...
Mac OS X : Apple Safari < 6.2.3 / 7.1.3 / 8.0.3 Multiple Vulnerabilities
The version of Apple Safari installed on the remote Mac OS X host is prior to 6.2.3 / 7.1.3 / 8.0.3. It is, therefore, affected by multiple memory corruption issues in WebKit. A remote attacker, using a specially crafted website, can exploit these to execute arbitrary code. C Tenable Network...
openSUSE Security Update : java-1_6_0-sun (openSUSE-SU-2011:0126-1)
Sun Java 1.6 was updated to Update 24 fixing various bugs and security issues. The update is rated critical by Sun. Following CVEs were addressed: CVE-2010-4452 CVE-2010-4454 CVE-2010-4462 CVE-2010-4463 CVE-2010-4465 CVE-2010-4467 CVE-2010-4469 CVE-2010-4473 CVE-2010-4422 CVE-2010-4451...
openSUSE Security Update : samba (openSUSE-SU-2013:1742-1)
"Samba received bug and security fixes : - Unconditionally create the CUPS smb backend sym link pointing to smbspool; bnc850656. - Private key in key.pem world readable; CVE-2013-4476; bnc848103. - ACLs are not checked on opening an alternate data stream on a file or directory; CVE-2013-4475;...
openSUSE Security Update : java-1_6_0-sun (java-1_6_0-sun-4147)
Sun Java 1.6 was updated to Update 24 fixing various bugs and security issues. The update is rated critical by Sun. Following CVEs were addressed: CVE-2010-4452 CVE-2010-4454 CVE-2010-4462 CVE-2010-4463 CVE-2010-4465 CVE-2010-4467 CVE-2010-4469 CVE-2010-4473 CVE-2010-4422 CVE-2010-4451...
Slackware 14.0 / 14.1 / current : samba (SSA:2013-322-03)
New samba packages are available for Slackware 14.0, 14.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-322-03. The text itself is copyright C...
DEBIAN-CVE-2013-4476
Samba 4.0.x before 4.0.11 and 4.1.x before 4.1.1, when LDAP or HTTP is provided over SSL, uses world-readable permissions for a private key, which allows local users to obtain sensitive information by reading the key file, as demonstrated by access to the local filesystem on an AD domain controll...
CVE-2013-4476
Samba CVE-2013-4476 affects Samba 4.0.x < 4.0.11 and 4.1.x
Security fix for the ALT Linux 10 package samba version 4.0.11-alt1
Nov. 12, 2013 Alexey Shabalin 4.0.11-alt1 - 4.0.11 - fixed CVE-2013-4475, CVE-2013-4476...
Security fix for the ALT Linux 8 package samba version 4.0.11-alt1
Nov. 12, 2013 Alexey Shabalin 4.0.11-alt1 - 4.0.11 - fixed CVE-2013-4475, CVE-2013-4476...
Security fix for the ALT Linux 8 package samba-DC version 4.0.11-alt1
Nov. 12, 2013 Alexey Shabalin 4.0.11-alt1 - 4.0.11 - fixed CVE-2013-4475, CVE-2013-4476...
Oracle Linux 5 : tar (ELSA-2010-0141)
The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2010-0141 advisory. - CVE-2007-4476 - fix stack crashing in safernamesuffix Tenable has extracted the preceding description block directly from the Oracle Linux security...
CVE-2012-4476
CVE-2012-4476 is an XSS vulnerability in the Drupal Drag & Drop Gallery module 6.x. The issue arises in the module’s file handling/uploads logic, with vectors not publicly specified in the provided docs. An advisory notes exploitation exists and that there is no patch; mitigation is to disable an...
Scientific Linux Security Update : java (jdk 1.6.0) on SL4.x, SL5.x i386/x86_64
This update fixes several vulnerabilities in the Sun Java 6 Software Development Kit. Further information about these flaws can be found on the 'Oracle Java SE and Java for Business Critical Patch Update Advisory' page. CVE-2010-4422, CVE-2010-4447, CVE-2010-4448, CVE-2010-4450, CVE-2010-4451,...
Scientific Linux Security Update : java-1.6.0-openjdk on SL6.x i386/x86_64
A denial of service flaw was found in the way certain strings were converted to Double objects. A remote attacker could use this flaw to cause Java-based applications to hang, for instance if they parse Double values in a specially crafted HTTP request. CVE-2010-4476 All running instances of...
Scientific Linux Security Update : cpio on SL3.x, SL4.x, SL5.x i386/x86_64
CVE-2005-4268 cpio large filesize buffer overflow CVE-2007-4476 tar/cpio stack crashing in safernamesuffix CVE-2010-0624 tar, cpio: Heap-based buffer overflow by expanding a specially crafted archive A heap-based buffer overflow flaw was found in the way cpio expanded archive files. If a user wer...
Scientific Linux Security Update : tomcat6 on SL6.x i386/x86_64
A denial of service flaw was found in the way certain strings were converted to Double objects. A remote attacker could use this flaw to cause Tomcat to hang via a specially crafted HTTP request. CVE-2010-4476 A flaw was found in the Tomcat NIO Non-Blocking I/O connector. A remote attacker could...
CentOS Update for java CESA-2011:0214 centos5 x86_64
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7443)
IBM Java 6 SR9 FP1 was updated to fix a critical security bug in float number handling. - The Java Runtime Environment hangs forever when converting '2.2250738585072012e-308' to a binary floating-point number. CVE-2010-4476 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description...