91 matches found
Oracle Linux 9 : .NET / 6.0 (ELSA-2022-4588)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-4588 advisory. 6.0.105-1.0.1 - Add missing Oracle RIDs - Build all packages on source-build even when in servicing 6.0.105-1 - Update to .NET SDK 6.0.105 and Runtime...
RHEL 8 : gcc-toolset-10-binutils (RHSA-2021:4588)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:4588 advisory. The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar...
Security Bulletin: IBM® Db2® 'Check for Updates' process is vulnerable to DLL hijacking (CVE-2019-4588)
Summary When a Db2 administrator executes the check for updates application from the start menu or from the command line, the Flexnet agent binary agent.exe may be vulnerable to DLL hijacking. Vulnerability Details CVEID: CVE-2019-4588 DESCRIPTION: IBM DB2 for Linux, UNIX and Windows includes DB2...
Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo Asset Management (CVE-2019-4588)
Summary IBM DB2 is shipped as a component of IBM Maximo Asset Management. Information about the security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and...
CVE-2019-4588
IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrary code and conduct DLL hijacking attacks...
CVE-2019-4588
The CVE-2019-4588 issue affects IBM Db2 for Windows (and Db2 Connect Server) across Db2 9.7, 10.1, 10.5, 11.1, and 11.5. The root cause is DLL hijacking in the check-for-updates (Flexnet agent) component, allowing a local user to execute arbitrary code. Impact is high for confidentiality, integri...
CVE-2020-4588
IBM i2 iBase 8.9.13 is vulnerable to unrestricted file upload, allowing uploaded executables to be run, potentially causing code execution on a victim. IBM’s Security Bulletin confirms the fix in iBase 9 and advises upgrading to a version that includes the fix. Affected product/version: IBM i2 iB...
Debian DSA-4588-1 : python-ecdsa - security update
It was discovered that python-ecdsa, a cryptographic signature library for Python, incorrectly handled certain signatures. A remote attacker could use this issue to cause python-ecdsa to either not warn about incorrect signatures, or generate exceptions resulting in a denial-of-service. C Tenable...
Buffer Overflow
libwmf is a library for reading and converting Windows Metafile Format WMF vector graphics. libwmf is used by applications such as GIMP and ImageMagick. It was discovered that libwmf did not correctly process certain WMF Windows Metafiles with embedded BMP images. By tricking a victim into openin...
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : libwmf (SSA:2018-120-01)
New libwmf packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-120-01. The text itself is copyrig...
GLSA-201602-03 : libwmf: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201602-03 libwmf: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libwmf. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code...
CVE-2016-4588
WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...
CVE-2016-4588
CVE-2016-4588 concerns WebKit in Apple tvOS prior to 9.2.2. The vulnerability is a memory corruption issue triggered by processing a crafted website in WebKit, allowing a remote attacker to execute arbitrary code or cause a denial of service on affected devices. Apple tvOS 9.2.2 addresses this is...
CVE-2016-4588
WebKit in Apple tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...
Gentoo Security Advisory GLSA 201602-03
Gentoo Linux Local Security Checks GLSA 201602-03 SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Amazon Linux AMI : libwmf (ALAS-2015-604)
It was discovered that libwmf did not correctly process certain WMF Windows Metafiles with embedded BMP images. By tricking a victim into opening a specially crafted WMF file in an application using libwmf, a remote attacker could possibly use this flaw to execute arbitrary code with the privileg...
CentOS 6 / 7 : libwmf (CESA-2015:1917)
Updated libwmf packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
Oracle Linux 6 / 7 : libwmf (ELSA-2015-1917)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1917 advisory. - Resolves: rhbz1227428 - CVE-2015-0848 CVE-2015-4588 CVE-2015-4695 CVE-2015-4696 Tenable has extracted the preceding description block directly fr...
RedHat Update for libwmf RHSA-2015:1917-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...