VMware Workstation 12.x < 12.5.7 Multiple Vulnerabilities (VMSA-2017-0015) (Linux)

The version of VMware Workstation installed on the remote Linux host is 12.x prior to 12.5.7. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability exists in VMware workstation within the SVGA device. An attacker with user access can exploit this to...

VMware Fusion SVGA Device Code Execution Vulnerability - Mac OS X

VMware Fusion is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion";...

Many high-risk SVGA code execution vulnerability bug,VMware efforts to be patched-vulnerabilities and early warning-the black bar safety net

VMware this week announced a patch to fix a number of vulnerabilities flaws bug, contains a major vulnerability flaws bugs, exploits flaws bug touches the product containing ESXi, vCenter Server, Workstation and Fusion. This is the major vulnerability flaws bug number for CVE-2017-4924, which is ...

CVE-2017-4924

CVE-2017-4924 is a VMware SVGA out-of-bounds write vulnerability that can allow a guest VM to execute code on the host. Affected products and versions (per provided docs): ESXi 6.5 prior to patch ESXi650-201707101-SG; VMware Workstation 12.x prior to 12.5.7; VMware Fusion 8.x prior to 8.5.8. The ...

Juniper Networks Junos OS vMX Information Leak Vulnerability

Junos OS on vMX is prone to an information leak vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

F5 Networks BIG-IP : OpenSSH vulnerabilities (SOL6736)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL6736. The text description of this plugin is C F5 Networks...

CVE-2015-4924

The CVE-2015-4924 entry applies to Oracle Supply Chain Products Suite, specifically the Oracle Agile PLM component, version 9.3.1.1/9.3.1.2/9.3.2/9.3.3. Connected sources (CNVD-2016-00559) describe a data-modification vulnerability in the Oracle Supply Chain Agile PLM Security component that allo...

Fedora Update for wireshark FEDORA-2013-17661

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2013-17661 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora 19 : wireshark-1.10.1-1.fc19 (2013-16362)

Ver. 1.10.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora Update for wireshark FEDORA-2013-16362

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-4924

CVE-2013-4924 affects Wireshark’s DCOM ISystemActivator dissector (epan/dissectors/packet-dcom-sysact.c) in Wireshark 1.10.x prior to 1.10.1. The vulnerability arises from inadequate validation of certain index values in crafted packets, enabling a remote attacker to trigger an assertion failure ...

Oracle Linux 4 : openssh (ELSA-2006-0697)

From Red Hat Security Advisory 2006:0697 : Updated openssh packages that fix two security flaws are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell...

CVE-2012-4924

CVE-2012-4924 affects ASUS Net4Switch with ipswcom.dll ActiveX 1.0.0.1 exposed via the Alert method, where a buffer overflow in CxDbgPrint enables remote code execution. The vulnerability stems from unchecked input length in the ActiveX control, allowing an attacker to craft a long parameter to t...

Slackware: Security Advisory (SSA:2006-272-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : opal on SL5.x i386/x86_64

In Scientific Linux 5, the Ekiga application uses opal. A flaw was discovered in the way opal handled certain Session Initiation Protocol SIP packets. An attacker could use this flaw to crash an application, such as Ekiga, which is linked with opal. CVE-2007-4924 %NASLMINLEVEL 70300 C Tenable...

conga security, bug fix, and enhancement update

0.12.2-51.0.1.el5 - Added conga-enterprise.patch - Added conga-enterprise-Carthage.patch to support OEL5 - Replaced redhat logo image in conga-0.12.2.tar.gz 0.12.2-51 - Fix bz711494 CVE-2011-1948 plone: reflected XSS vulnerability - Fix bz771920 CVE-2011-4924 Zope: Incomplete upstream patch for...

CVE-2012-4924

creationtimestamp| type| source ---|---|--- 2012-02-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18538 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/asusnet4switchipswcom.rb 2025-02-06...

CVE-2010-4924

PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to execute arbitrary PHP code via a URL in the actionPath parameter. NOTE: this issue has been disputed by a reliable third party...

CVE-2010-4924

CVE-2010-4924 concerns clearBudget 0.9.8, where the logic/controller.class.php file’s actionPath parameter enables a PHP remote file inclusion, allowing remote code execution. The issue is documented across multiple sources via NVD/Red Hat entries, all noting the vulnerability and its note that i...

SunSSH < 1.1.1 / 1.3 CBC Plaintext Disclosure

The version of SunSSH running on the remote host has an information disclosure vulnerability. A design flaw in the SSH specification could allow a man-in-the-middle attacker to recover up to 32 bits of plaintext from an SSH-protected connection in the standard configuration. An attacker could...