Ubuntu: Security Advisory (USN-4985-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Intel Microcode vulnerabilities (USN-4985-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4985-1 advisory. It was discovered that some Intel processors may not properly invalidate cache entries used by Intel Virtualization Technology fo...

CVE-2020-4985

IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to accepting body parameters in a query. IBM X-Force ID: 192642...

CVE-2020-4985

IBM Planning Analytics Local 2.0 is affected by an information-disclosure vulnerability in the Planning Analytics Spreadsheet Services component, caused by accepting body parameters in a query. The issue could allow an attacker to obtain sensitive information. IBM states the vulnerability is addr...

Security Bulletin: IBM Planning Analytics Spreadsheet Services is affected by a security vulnerability

Summary The Planning Analytics Spreadsheet Services component of IBM Planning Analytics is affected by a vulnerability. This has been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Spreadsheet Services Release 64. Vulnerability Details CVEID: CVE-2020-4985 DESCRIPTION: IBM...

CVE-2019-4985

...

CVE-2019-4985

CVE-2019-4985: this CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2013-4985

CVE-2013-4985 affects Vivotek IP cameras, enabling remote unauthenticated RTSP authentication bypass to access video streams. Core Security CoreLabs advisory CORE-2013-0704 describes exploiting RTSP basic auth bypass by sending crafted RTSP packets to port 554, tested on IP7160, IP7361, IP8332 wi...

CVE-2018-4985

Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2018-4985

Adobe Acrobat/Reader (Windows and macOS) versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier are affected by an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. The issue is tied to the classic Use-After-Re...

Adobe Acrobat 2017 Security Updates (APSB18-09) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Adobe Acrobat 2017 Security Updates (APSB18-09) - Mac OS X

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

CVE-2017-4985

EMC VNX2/VNX1 local privilege escalation (CVE-2017-4985). A local authenticated user may bypass authorization checks on certain Perl scripts, potentially gaining root on the VNX Control Station. Affected versions: VNX2 OE for File prior to 8.1.9.211 and VNX1 OE for File prior to 7.1.80.8. Rooted ...

CVE-2011-4985

...

CVE-2011-4985

CVE-2011-4985 is rejected; this candidate is not associated with any vulnerability.

rpp.pe XSS vulnerability

Vulnerable URL: http://rpp.pe/tema-champions-league?nssource=';alert'OPENBUGBOUNTY';// Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4985 VIP website...

CVE-2016-4985

The ironic-api service in OpenStack Ironic before 4.2.5 Liberty and 5.x before 5.1.2 Mitaka allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the...

CVE-2016-4985

CVE-2016-4985 affects the OpenStack Ironic project, specifically the ironic-api service. The vulnerability allows an attacker with network access to the ironic-api to bypass authentication and retrieve full details of a registered node by knowing the node’s MAC address and sending a crafted POST ...

Oracle: Security Advisory (ELSA-2008-0145)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CORE-2013-0704 - Vivotek IP Cameras RTSP Authentication Bypass

Core Security - Corelabs Advisory http://corelabs.coresecurity.com Vivotek IP Cameras RTSP Authentication Bypass 1. Advisory Information Title: Vivotek IP Cameras RTSP Authentication Bypass Advisory ID: CORE-2013-0704 Advisory URL:...