72 matches found
Denial Of Service (DoS)
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...
Integer Overflow
Wireshark, previously known as Ethereal, is a network protocol analyzer. It is used to capture and browse the traffic running on a computer network. Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly,...
CVE-2018-4934
Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...
CVE-2018-4934
CVE-2018-4934 affects Adobe Flash Player ≤ 29.0.0.113, with an exploitable out-of-bounds read that could cause information disclosure. The issue is part of APSB18-08; Red Hat and Gentoo advisories map this to multiple Flash vulnerabilities. Vulnerable files/versions are Flash Player prior to 29.0...
RHEL 6 : flash-plugin (RHSA-2018:1119)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:1119 advisory. - flash-plugin: Remote Code Execution vulnerabilities APSB18-08 CVE-2018-4932, CVE-2018-4935, CVE-2018-4937 - flash-plugin: Information...
Microsoft IE And Microsoft Edge Flash Player Security Update (KB4093110)
This host is missing a critical security update according to Microsoft KB4093110. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-4934
Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...
KLA11223 Multiple vulnerabilities in Adobe Flash Player
Multiple serious vulnerabilities have been found in Adobe Flash Player. Malicious users can exploit these vulnerabilities to execute arbitrary code and obtain sensitive information. 1. Use-After-Free vulnerability can be exploited remotely to execute arbitrary code; 2. Out-of-bounds reading...
Adobe Flash Player <= 29.0.0.113 (APSB18-08)
The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 29.0.0.113. It is therefore affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2017-4934
CVE-2017-4934 affects VMware Workstation 12.x (pre-12.5.8) and VMware Fusion 8.x (pre-8.5.9), with a heap buffer‑overflow in the VMNAT device that may allow a guest to execute code on the host. The issue is local: an attacker on the guest can trigger code execution in the host context. Related ad...
VMware Workstation, Fusion and Horizon View Client updates resolve multiple security vulnerabilities
a. Heap buffer-overflow vulnerability in VMNAT device VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host. VMware would like to thank Jun Mao of Tencent PC Manager working with Trend Micro's Zero Day...
CVE-2011-4934
CVE-2011-4934 is a reservation duplicate of CVE-2012-0820; connected records establish a Joomla! XSS issue: Joomla! 1.6.x and 1.7.x prior to 1.7.4 allow remote injection of arbitrary script/HTML via unspecified vectors. The CVE mapping indicates the vulnerability is addressed by upgrading to Joom...
CVE-2016-4934
CVE-2016-4934 is rejected/not used and does not represent an active vulnerability entry.
Oracle: Security Advisory (ELSA-2009-0264)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2014-0341)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux: Security Advisory (ALAS-2013-251)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM Tivoli Storage Manager FastBack 6.1.x < 6.1.12.1 Multiple Vulnerabilities
The version of IBM Tivoli Storage Manager FastBack running on the remote host is 6.1.x prior to 6.1.12.1. It is, therefore, affected by multiple stack-based buffer overflow conditions that can be exploited by a remote attacker, using specially crafted packets, to cause a denial of service or...
CVE-2015-4934
CVE-2015-4934 is a stack-based buffer overflow in the IBM Tivoli Storage Manager FastBack Server. The IBM Security Bulletin and NVD entry confirm the vulnerability lies in the server’s handling of crafted packets, allowing a remote attacker to execute arbitrary code—potentially with SYSTEM privil...