56 matches found
K15868: Multiple Wireshark vulnerabilities
Security Advisory Description CVE-2013-4074 The dissectcapwapdata function in epan/dissectors/packet-capwap.c in the CAPWAP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 incorrectly uses a -1 data value to represent an error condition, which allows remote attackers to cause a...
SUSE CVE-2013-4920
The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable, which allows remote attackers to cause a denial of service application crash via a crafted packet...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 101 to the stable channel for Windows, Mac and Linux.This will roll out over the coming days/weeks. Chrome 101.0.4951.41 for Windows,Mac and Linux contains a number of fixes and improvements -- a list of changes is available in the...
Mageia: Security Advisory (MGASA-2018-0189)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4920-1 : libx11 - security update
Roman Fiedler reported that missing length validation in various functions provided by libx11, the X11 client-side library, allow to inject X11 protocol commands on X clients, leading to authentication bypass, denial of service or potentially the execution of arbitrary code. %NASLMINLEVEL 70300 C...
CVE-2020-4920
CVE-2020-4920 affects IBM Jazz Team Server. Public details in connected CNVD/NVD entries describe a stored cross-site scripting vulnerability in the Jazz Team Server Web UI that can lead to credential disclosure within a trusted session. Remediation in the IBM bulletin section recommends upgradin...
CVE-2020-4920
IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396...
CVE-2018-4920
Adobe Flash Player
RHEL 6 : flash-plugin (RHSA-2018:0520)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:0520 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to...
FreeBSD : Flash Player -- multiple vulnerabilities (313078e3-26e2-11e8-9920-6451062f0f7a)
Adobe reports : - This update resolves a use-after-free vulnerability that could lead to remote code execution CVE-2018-4919. - This update resolves a type confusion vulnerability that could lead to remote code execution CVE-2018-4920. C Tenable Network Security, Inc. The descriptive text and...
CVE-2018-4920
creationtimestamp| type| source ---|---|--- 2018-03-13 23:06:45+00:00| seen| https://t.me/informationsecuritychannel/14198...
March 2018 Adobe Flash Security Update
This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB18-05: CVE-2018-4919 and CVE-2018-4920...
Adobe Flash Player for Mac <= 28.0.0.161 (APSB18-05)
The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 28.0.0.161. It is therefore affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108283; scriptversion"1.6";...
Flash Player -- multiple vulnerabilities
Adobe reports: This update resolves a use-after-free vulnerability that could lead to remote code execution CVE-2018-4919. This update resolves a type confusion vulnerability that could lead to remote code execution CVE-2018-4920...
Adobe Flash Player <= 28.0.0.161 (APSB18-05)
The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 28.0.0.161. It is therefore affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
KB4088785: Security update for Adobe Flash Player (March 2018)
The remote Windows host is missing security update KB4088785. It is, therefore, affected by multiple remote code execution vulnerabilities in Adobe Flash Player. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108287; scriptversion"1.11";...
CVE-2017-4920
CVE-2017-4920 affects VMware NSX-V Edge: the OSPF implementation mishandles LSA processing in NSX-V Edge 6.2.x (before 6.2.8) and 6.3.x (before 6.3.3). A rogue LSA can trigger continuous LSAs between two routers, potentially creating a loop or causing loss of connectivity. The issue is mitigated ...
VMSA-2017-0014:VMware NSX-V Edge updates address OSPF Protocol LSA DoS
VMSA-2017-0014 VMware NSX-V Edge updates address OSPF Protocol LSA DoS VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0014 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware NSX-V Edge updates address OSPF Protocol LSA DoS VMware...
Oracle Solaris Critical Patch Update : jan2016_SRU11_3_0_0_0
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NDMP Backup Service. The supported version that is affected is 11. Easily exploitable vulnerability requiring logon t...