76 matches found
CVE-2022-4927
The CVE-2022-4927 entry concerns ualbertalib NEOSDiscovery prior to 1.0.71. The vulnerability affects the file path app/views/bookmarks/_refworks.html.erb and enables manipulation that leads to navigation to a web link targeting an untrusted destination with window.opener access (reverse-tabnabbi...
SUSE: Security Advisory (SUSE-SU-2013:1450-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : File Roller vulnerability (USN-4927-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4927-1 advisory. It was discovered that File Roller incorrectly handled symlinks. An attacker could possibly use this issue to expose sensitive information...
CVE-2019-4927
CVE-2019-4927 entry is rejected/not used; it does not represent an active vulnerability.
Denial Of Service (DoS)
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...
Denial Of Service (DoS)
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...
Integer Overflow
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...
CVE-2018-4927
Adobe InDesign
Adobe InDesign CC < 13.1 Multiple Vulnerabilities (APSB18-11) (macOS)
The version of Adobe InDesign CC installed on the remote macOS or Mac OS X host is prior to 13.1. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid109031; scriptversion"1.5";...
Adobe InDesign Multiple Vulnerabilities (APSB18-11) - Mac OS X
Adobe InDesign is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:indesignserver";...
CVE-2017-4927
CVE-2017-4927 affects VMware vCenter Server 6.5 (before 6.5 U1) and 6.0 (before 6.0 U3c). The issue is a LDAP DoS: specially crafted LDAP network packets may cause the service to fail remotely. Affected components are VMware vCenter Server, where the LDAP handling is implicated; SSRF/CRLF issues ...
KLA11142 DoS and OSI vulnerabilities in VMware products
Multiple serious vulnerabilities have been found in VMware vCenter Server and vSphere Web Client. Malicious users can exploit these vulnerabilities to cause denial of service or disclose sensetive information. Below is a complete list of vulnerabilities: 1. An unspecified vulnerability in VMware...
CVE-2016-4927
CVE-2016-4927 affects Junos Space (pre-15.2R2). The root cause is insufficient validation of SSH keys during Space-to-managed-device communications, enabling MITM-style attacks. Impact is partial confidentiality/integrity/availability according to CVSS, with network access and no authentication r...
Juniper Networks Junos Space Multiple Vulnerabilities (JSA10760)
Juniper Networks Junos Space is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2015-4927
The Reporting and Monitoring component in Tivoli Monitoring in IBM Tivoli Storage Manager 6.3 before 6.3.6 and 7.1 before 7.1.3 on Linux and AIX uses world-writable permissions for unspecified files, which allows local users to gain privileges by writing to a file...
CVE-2015-4927
IBM Tivoli Storage Manager’s Tivoli Monitoring Reporting and Monitoring component is affected in versions 6.3 prior to 6.3.6 and 7.1 prior to 7.1.3 on Linux and AIX. The issue is world-writable permissions on unspecified files, enabling local users to gain privileges by writing to a file. IBM’s s...
Oracle: Security Advisory (ELSA-2014-0341)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2013-1569)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux: Security Advisory (ALAS-2013-251)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...