62 matches found
SUSE: Security Advisory (SUSE-SU-2016:2100-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: IBM Security Guardium is affected by a Privilege Escalation vulnerability (CVE-2020-4952)
Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2020-4952 DESCRIPTION: IBM Security Guardium could allow an authenticated user to gain root access due to improper access control. CVSS Base score: 8.8 CVSS Temporal Score: See:...
Ubuntu 18.04 LTS / 20.04 LTS : MySQL vulnerabilities (USN-4952-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4952-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been...
Ubuntu: Security Advisory (USN-4952-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:1703-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 8 : freetype (CESA-2020:4952)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4952 advisory. - freetype: Heap-based buffer overflow due to integer truncation in LoadSBitPng CVE-2020-15999 Note that Nessus has not tested for this issue but has instead...
CVE-2020-4952
creationtimestamp| type| source ---|---|--- 2021-01-27 20:37:37+00:00| seen| https://t.me/cibsecurity/22742...
CVE-2020-4952
CVE-2020-4952 affects IBM Security Guardium 11.2 (also 11.1/11.3 per IBM bulletin). An authenticated user can gain root access due to improper access control (privilege escalation). Base score 8.8 (CVSS3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Remediation: fixes available for 11.1, 11.2, and 11.3...
CVE-2020-4952
IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028...
Oracle Linux 8 : freetype (ELSA-2020-4952)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4952 advisory. 2.9.1-4.el83.1 - Test bitmap size earlier for PNGs - Fix memory leak in pngshim.c - Resolves: 1891905 Tenable has extracted the preceding description block...
CVE-2018-4952
CVE-2018-4952 is a Use-after-free vulnerability in Adobe Acrobat and Reader affecting versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier. Successful exploitation could lead to arbitrary code execution under the current user. The linked Nessus/APSB18-09...
Adobe Acrobat 2017 Security Updates (APSB18-09) - Mac OS X
Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
Adobe Acrobat 2017 Security Updates (APSB18-09) - Windows
Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...
CVE-2015-4952
The on-demand plugin in IBM Endpoint Manager for Remote Control 9.0.1 and 9.1.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. IBM X-Force ID: 105196...
CVE-2015-4952
CVE-2015-4952 affects IBM Endpoint Manager for Remote Control, on-demand plugin, with vulnerable versions 9.0.1 and 9.1.0. The on-demand plugin allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. Root cause/details beyond this description are not provided in t...
CVE-2015-4952
The on-demand plugin in IBM Endpoint Manager for Remote Control 9.0.1 and 9.1.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. IBM X-Force ID: 105196...
CVE-2014-4952
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2014. Notes: none...
CVE-2016-4952
QEMU aka Quick Emulator, when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service out-of-bounds array access via vectors related to the 1 PVSCSICMDSETUPRINGS or 2 PVSCSICMDSETUPMSGRING SCSI command...