164 matches found
CVE-2018-4997
Adobe Acrobat and Reader versions 2018.009.20050 and earlier, 2017.011.30070 and earlier, and 2015.006.30394 and earlier contain an out-of-bounds write vulnerability. Exploitation could allow arbitrary code execution in the context of the current user. The CVE description does not specify vendor ...
Adobe Acrobat < 2015.006.30413 / 2017.011.30078 / 2018.011.20035 Multiple Vulnerabilities (APSB18-02)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30413, 2017.011.30078, or 2018.011.20035. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...
Adobe Acrobat Reader DC (Continuous Track) Multiple Vulnerabilities (APSB18-02) - Windows
Adobe Acrobat Reader DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2014-4997
lib/commands/setup.rb in the point-cli gem 0.0.1 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process...
CVE-2014-4997
lib/commands/setup.rb in the point-cli gem 0.0.1 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process...
CVE-2014-4997
CVE-2014-4997 affects the Ruby point-cli gem (version 0.0.1). The issue is in lib/commands/setup.rb, where credentials are placed on the curl command line, allowing a local attacker to obtain sensitive information by listing the process. Impact is local plaintext credential disclosure; no remote ...
EMC VMAX VASA Provider Virtual Appliance < 8.4.0 File Upload RCE
The version of EMC VMAX VASA Provider Virtual Appliance running on the remote host is prior to 8.4.0. It is, therefore, affected by a remote code execution vulnerability in the UploadConfigurator servlet due to a failure to restrict file uploads to arbitrary directories. An unauthenticated, remot...
VASA Provider Virtual Appliance 8.3.x Remote Code Execution Exploit
VASA Provider Virtual Appliance versions prior to 8.3.x may potentially be vulnerable to an unauthenticated remote code execution vulnerability. An unauthenticated remote attacker could upload a malicious file to run arbitrary code on the system with root privileges. VASA Provider Virtual Applian...
Ubuntu 12.04 LTS : linux regression (USN-3338-2) (Stack Clash)
USN-3338-1 fixed vulnerabilities in the Linux kernel. However, the fix for CVE-2017-1000364 introduced regressions for some Java applications. This update addresses the issue. We apologize for the inconvenience. It was discovered that the stack guard page for processes in the Linux kernel was not...
CVE-2017-4997
The CVE-2017-4997 issue affects EMC VMAX VASA Provider Virtual Appliance (versions 8.3.x and prior). The root cause is an unrestricted UploadConfigurator servlet that allows uploading files, which enables a remote attacker to upload arbitrary code and execute it with root privileges. Public detai...
USN-3338-2: Linux kernel regression
USN-3338-1 fixed vulnerabilities in the Linux kernel. However, the fix for CVE-2017-1000364 introduced regressions for some Java applications. This update addresses the issue. We apologize for the inconvenience. Original advisory details: It was discovered that the stack guard page for processes ...
Ubuntu 12.04 LTS : linux vulnerabilities (USN-3338-1)
It was discovered that the stack guard page for processes in the Linux kernel was not sufficiently large enough to prevent overlapping with the heap. An attacker could leverage this with another vulnerability to execute arbitrary code and gain administrative privileges CVE-2017-1000364 Jesse Hert...
USN-3338-1: Linux kernel vulnerabilities
It was discovered that the stack guard page for processes in the Linux kernel was not sufficiently large enough to prevent overlapping with the heap. An attacker could leverage this with another vulnerability to execute arbitrary code and gain administrative privileges CVE-2017-1000364 Jesse Hert...
CVE-2011-4997
CVE-2011-4997 entry is rejected and not used.
openSUSE Security Update : the Linux Kernel (openSUSE-2017-532)
The openSUSE Leap 42.2 kernel was updated to 4.4.62 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-7618: crypto/ahash.c in the Linux kernel allowed attackers to cause a denial of service API operation calling its own callback, and infinite recursion ...
openSUSE: Security Advisory for kernel (openSUSE-SU-2017:1140-1)
The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
EulerOS 2.0 SP1 : kernel (EulerOS-SA-2016-1048)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The netfilter subsystem in the Linux kernel through 4.5.2 does not validate certain offset fields, which allows local users to gain privileges o...
Linux Kernel 4.6.3 Netfilter Privilege Escalation Exploit
This Metasploit module attempts to exploit a netfilter bug on Linux Kernels before 4.6.3, and currently only works against Ubuntu 16.04 not 16.04.1 with kernel 4.4.0-21-generic. Several conditions have to be met for successful exploitation. This module requires Metasploit:...