Symantec Endpoint Protection Client 12.1.x < 12.1 RU6 MP10 / 14.0.x < 14.0 RU1 MP1 Multiple Vulnerabilities (SYMSA1454)

The version of Symantec Endpoint Protection SEP Client installed on the remote host is 12.1.x prior to 12.1 RU6 MP10 or 14.0.x prior to 14.0 RU1 MP1. It is, therefore, affected by a multiple vulnerabilities as referenced in the advisory. Note that Nessus has not tested for this issue but has...

CVE-2018-5236

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition or race hazard. This type of issue occurs in software where the output is dependent on the sequence or timing of other uncontrollable events...

CVE-2018-5236

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition or race hazard. This type of issue occurs in software where the output is dependent on the sequence or timing of other uncontrollable events...

CVE-2018-5236

Symantec Endpoint Protection (SEP) has a race-condition vulnerability CVE-2018-5236 (and related CVE-2018-5237) affecting SEP Client 12.1.x before 12.1 RU6 MP10 or 14.0.x before 14.0 RU1 MP1. Risk is described as a race condition in Windows SEP endpoints. Remediation: upgrade to SEP 14 RU1 MP1 or...

Symantec Endpoint Protection Multiple Issues

SUMMARY Symantec has released a set of updates to address issues that were discovered in the Symantec Endpoint Protection product. AFFECTED PRODUCTS Symantec Endpoint Protection --- CVE | Affected Versions | Remediation CVE-2018-5236 CVE-2018-5237 | Prior to 14 RU1 MP1 or 12.1 RU6 MP10 | Upgrade ...

CVE-2017-5236

Rapid7 AppSpider Pro installers prior to version 6.14.060 are affected by a DLL preloading vulnerability. The installer can load a malicious DLL from its current working directory, enabling tampering during installation. CNVD-2017-10390 confirms this flaw; CVE-2017-5236 notes the affected pre-6.1...

SOL55922302 - XSS in F5 WebSafe Dashboard vulnerability CVE-2016-5236

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

CVE-2007-5236

Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.215 and earlier, on Windows does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to read local files via an untrusted application...

Open-Xchange 7.6.0 XSS / SSRF / Traversal Vulnerabilities

Open-Xchange versions 7.6.0 and below suffer from absolute path traversal, server-side request forgery, XXE injection, and cross site scripting vulnerabilities. Product: OX App Suite Vendor: Open-Xchange GmbH Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 7.6.0 and earlier...

CVE-2011-5236

Moneris eSelectPlus 2.03 PHP API is affected by a hostname verification flaw in SSL/TLS: it does not check that the server certificate CN/subjectAltName matches the server hostname, enabling potential man-in-the-middle spoofing with an arbitrary valid certificate. This is documented in CVE-2011-5...

CVE-2010-5236

CVE-2010-5236 affects Roxio Easy Media Creator Home 9.0.136. The vulnerability is an untrusted search path that allows local users to gain privileges via a Trojan horse homeutils9.dll placed in the current working directory. Demonstrations reference directories containing .roxio, .c2d, or .gi fil...

CVE-2006-5236

creationtimestamp| type| source ---|---|--- 2009-12-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10572...

Mandriva Security Advisory MDVSA-2009:319 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory MDVSA-2009:319. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : xine-lib (MDVSA-2009:319)

Vulnerabilities have been discovered and corrected in xine-lib : Failure on Ogg files manipulation can lead remote attackers to cause a denial of service by using crafted files CVE-2008-3231. Failure on manipulation of either MNG or Real or MOD files can lead remote attackers to cause a denial of...

SLES10: Security update for IBM Java 1.4.2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-142-ibm java-142-ibm-devel java-142-ibm-jdbc java-142-ibm-plugin More details may also be found by searching for the SuSE Enterprise Server 10 patch...

SLES9: Security update for IBMJava5-JRE,IBMJava5-SDK

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava5-JRE IBMJava5-SDK For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for Sun Java 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java2 java2-jre For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5020427 within...

SLES9: Security update for IBM Java 5 and JRE

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava5-SDK IBMJava5-JRE For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for Sun Java 2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java2 java2-jre For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5020427 within...

SLES9: Security update for IBMJava5-JRE, IBMJava5-SDK

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: IBMJava5-JRE IBMJava5-SDK For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...