Ubuntu 18.04 LTS / 20.04 LTS : Lasso vulnerability (USN-4974-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4974-1 advisory. It was discovered that Lasso did not properly verify that all assertions in a SAML response were properly signed. An attacker could possibly use this ...

RHEL 6 : chromium-browser (RHSA-2020:4974)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4974 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 86.0.4240.183. Security Fixes:...

CVE-2011-4974

creationtimestamp| type| source ---|---|--- 2020-11-06 00:49:38+00:00| seen| https://t.me/cibsecurity/15903...

CVE-2011-4974

CVE-2011-4974 entry is rejected/not used; it does not represent an active vulnerability entry.

CVE-2019-4974

CVE-2019-4974 entry is rejected/not used per Initial Description.

Security Bulletin: A security vulnerability has been identified in IBM® GPFS shipped with IBM PureData System for Operational Analytics (CVE-2015-4974, CVE-2015-4981)

Summary IBM GPFS is shipped as a component of IBM PureData System for Operational Analytics. Information about a security vulnerability affecting IBM GPFS has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin: IBM Spectrum Scale an...

Security Bulletin: IBM Spectrum Scale and IBM GPFS are affected by security vulnerabilities (CVE-2015-4974, CVE-2015-4981)

Summary Security vulnerabilities have been identified in the current levels of IBM Spectrum Scale V4.1.1, IBM GPFS V4.1 and V3.5: - could allow a local non privileged attacker to execute commands with root privileges CVE-2015-4974 - could allow a local non privileged attacker to read system...

CVE-2018-4974

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2018-4974

CVE-2018-4974 affects Adobe Acrobat and Reader prior to specific versions (2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier). The connected Nessus and NVD entries confirm a Use-after-free condition in the affected components, enabling arbitrary code execution...

Security Bulletin: IBM Virtualization Engine TS7700 Is Affected by IBM GPFS Security Vulnerabilities (CVE-2015-4974 CVE-2015-4981)

Summary Security vulnerabilities have been identified in the current levels of IBM GPFS as used by the TS7700: - could allow a local non privileged attacker to execute commands with root privileges CVE-2015-4974 - could allow a local non privileged attacker to read system memory contents...

Security Bulletin: GPFS security vulnerabilities in IBM Storwize V7000 Unified (CVE-2015-4974 and CVE-2015-4981)

Summary A fix is available for IBM Storwize V7000 Unified, for GPFS security vulnerabilities Vulnerability Details IBM General Parallel File System GPFS is a high-performance clustered file system. It is used in IBM Storwize V7000 Unified. CVEID: CVE-2015-4974 DESCRIPTION: IBM General Parallel Fi...

Security Bulletin:The GPFS pattern provided with IBM PureApplication System is affected by security vulnerabilities. (CVE-2015-4974 and CVE-2015-4981)

Summary Security vulnerabilities have been identified in the current levels of IBM Spectrum Scale V4.1.1, IBM GPFS V4.1 and V3.5: - could allow a local non privileged attacker to execute commands with root privileges CVE-2015-4974 - could allow a local non privileged attacker to read system...

Adobe Acrobat 2017 Security Updates (APSB18-09) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Adobe Acrobat 2017 Security Updates (APSB18-09) - Mac OS X

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

CVE-2017-4974

CVE-2017-4974 is a blind SQL injection vulnerability affecting Cloud Foundry Foundation components: cf-release versions prior to v258 and UAA releases prior to v2.7.4.15 (2.x), v3.6.9 (3.6.x), v3.9.11 (3.9.x), and prior to v3.16.0 in general, plus uaa-release bosh releases prior to v13.13, v24.8,...

CVE-2016-4974

Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS AMQP 1.0 before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a...

CVE-2015-4974

CVE-2015-4974 affects IBM GPFS/Spectrum Scale: local attacker could execute commands with root privileges. A related issue, CVE-2015-4981, could allow reading system memory contents. Affected products include GPFS 3.5.x before 3.5.0.27, GPFS 4.1.x before 4.1.1.2, and Spectrum Scale 4.1.1.x before...

CVE-2014-4974

Vulnerability summary (CVE-2014-4974): The ESET Personal Firewall NDIS filter driver (EpFwNdis.sys) in multi-VM/host products (kernel module used in ESET 5.0–7.0) is vulnerable to local IOCTL-based memory leakage. The issue affects EpFwNdis.sys built before 1212 (20140609); crafted IOCTL calls ca...

RealPlayer for Windows < 16.0.3.51 Multiple Vulnerabilities

According to its build number, the installed version of RealPlayer on the remote Windows host is earlier than 16.0.3.51. It is, therefore, affected by the following vulnerabilities : - A stack-based buffer overflow error exists related to handling RealPlayer Metadata Package RMP filenames...

CVE-2013-4974

CVE-2013-4974 affects RealNetworks RealPlayer and RealPlayer SP. The root cause is memory corruption when handling RealMedia files, allowing remote code execution or denial of service. Affected: RealPlayer before 16.0.3.51 and RealPlayer SP 1.0–1.1.5. Existence of multiple publicly known scanner ...