162 matches found
CVE-2017-4623
CVE-2017-4623 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-4622
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4623, and CVE-2016-4624...
Memory corruption
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4622, CVE-2016-4623, and CVE-2016-4624...
CVE-2016-4623
Technical details for CVE-2016-4623 are not provided in the connected documents; monitor for updates.
CVE-2016-4623
WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, a different vulnerability than CVE-2016-4589, CVE-2016-4622, and CVE-2016-4624...
Amazon Linux: Security Advisory (ALAS-2012-105)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Joomla Component ds_syndicate SQL Injection (CVE-2008-4623)
An SQL injection vulnerability has been reported in Martin Diphoorn Ds-syndicate. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2014-4623
EMC Avamar ADS GEN4(S) and Avamar Virtual Edition (AVE) versions 6.0.x, 6.1.x, and 7.0.x are affected when the Password Hardening package is installed prior to 2.0.0.4. The issue stems from using UNIX DES crypt for password hashing, enabling context-dependent attackers to recover cleartext passwo...
[SECURITY] [DSA 2782-1] polarssl security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2782-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 20, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2782-1 (polarssl - several vulnerabilities)
Multiple security issues have been discovered in PolarSSL, a lightweight crypto and SSL/TLS library: CVE-2013-4623 Jack Lloyd discovered a denial of service vulnerability in the parsing of PEM-encoded certificates. CVE-2013-5914 Paul Brodeur and TrustInSoft discovered a buffer overflow in the...
DSA-2782-1 polarssl - several
Bulletin has no description...
Debian: Security Advisory (DSA-2782-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for polarssl FEDORA-2013-16356
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for polarssl FEDORA-2013-16317
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 18 : polarssl-1.2.8-1.fc18 (2013-16356)
PolarSSL 1.2.8 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...
Amazon Linux AMI : rsyslog (ALAS-2012-105)
A numeric truncation error, leading to a heap-based buffer overflow, was found in the way the rsyslog imfile module processed text files containing long lines. An attacker could use this flaw to crash the rsyslogd daemon or, possibly, execute arbitrary code with the privileges of rsyslogd, if the...
Oracle Linux 4 : kernel (ELSA-2006-0617 / ELSA-2006-0689)
Updated kernel packages that fix security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These new kernel packages contain fixes for the security...
Cisco IOS Software DHCP Version 6 Server Denial of Service Vulnerability (cisco-sa-20120926-dhcpv6)
Cisco IOS Software and Cisco IOS XE Software contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. An attacker could exploit this vulnerability by sending a crafted request to an affected device that has the DHCP version 6 DHCPv6...
CVE-2012-4623
The CVE-2012-4623 entry covers a DoS vulnerability in the DHCPv6 server of Cisco IOS/IOS XE. A malformed DHCPv6 packet can be sent remotely to Cisco devices running affected releases (IOS 12.2–12.4, 15.0–15.2 and IOS XE 2.1.x–2.6.x, 3.1.xS before 3.1.4S, 3.1.xSG, 3.2.xSG before 3.2.5SG, 3.2.xS, 3...
CVE-2011-4623
CVE-2011-4623 — rsyslog imfile integer overflow : The rsyslog daemon’s imfile module is affected by an overflow in rsCStrExtendBuf (runtime/stringbuf.c). This occurs in rsyslog 4.x before 4.6.6, 5.x before 5.7.4, and 6.x before 6.1.4, allowing a local user to trigger a heap-based buffer overflow ...