Rocky Linux 8 : kernel-rt (RLSA-2022:5565)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:5565 advisory. - kernel: race condition in perfeventopen leads to privilege escalation CVE-2022-1729 Note that Nessus has not tested for this issue but has instead relied only ...

RHEL 8 : kernel-rt (RHSA-2022:5565)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5565 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

RHEL 8 : firefox (RHSA-2020:5565)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:5565 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

CVE-2020-5565

CVE-2020-5565 affects Cybozu Garoon 4.0.0–4.10.3. The connected JVN entry documents an Input validation bypass in the Workflow and MultiReport applications (CWE-20), allowing a remote authenticated attacker to alter the product’s data. Root cause: improper input validation in the targeted compone...

JVN#35649781: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Authentication bypass in the API used to specify the fields CWE-287 - CVE-2020-5563 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N| Base Score: 5.3 CVSS v2|...

Furukawa Electric ConsciusMAP 2.8.1 Java Deserialization Remote Code Execution

!/usr/bin/env python3 -- coding: utf-8 -- Furukawa Electric ConsciusMAP 2.8.1 Java Deserialization Remote Code Execution Vendor: Furukawa Electric Co., Ltd. | Tecnored SA Product web page: https://www.furukawa.co.jp | https://www.tecnoredsa.com.ar Affected version: APROS Evolution | 2.8.1 FURUKAW...

CVE-2019-5565

...

CVE-2017-5565

CVE-2017-5565 affects Trend Micro products (Maximum Security, Internet Security, Antivirus+ Security 11.0 and earlier) and is a local code-injection vulnerability. The root cause described across sources is that an attacker can abuse Microsoft Application Verifier by inserting a DLL via Image Fil...

CVE-2016-5565

CVE-2016-5565 describes an unspecified vulnerability in Oracle Hospitality OPERA 5 Property Services within Oracle Hospitality Applications (versions 5.4.0.0–5.4.3.0, 5.5.0.0, 5.5.1.0). The core issue is in the OPERA component (OPERA 5 Property Services) that allows remote authenticated users to ...

Google Chrome < 44.0.2403.155 Multiple Vulnerabilities (Mac OS X)

The version of Google Chrome installed on the remote Mac OS X host is prior to 44.0.2403.155. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-556...

Google Chrome < 44.0.2403.155 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 44.0.2403.155. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555, CVE-2015-5558, CVE-2015-5562...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allows attackers to execute arbitrary code via unspecified vector...

CVE-2015-5565

Technical details for CVE-2015-5565 are not publicly available in the provided documents; no affected products, versions, or remediation are specified here. Monitor for updates.

CVE-2015-5557

Technical details for CVE-2015-5557 are not provided in the connected documents; they reference related Flash use-after-free CVEs but do not specify this exact vulnerability’s affected products, root cause, or patch.

CVE-2015-5130

Technical details about CVE-2015-5130 are not provided in the supplied documents. Monitor for updates from official advisories; no specifics on affected products, impact, or remediation are included here.

CVE-2015-5561

CVE-2015-5561 is a use-after-free vulnerability in Adobe Flash Player and related Adobe AIR components that potentially allows remote code execution. Affected products and versions (per the description) include: Flash Player before 18.0.0.232 on Windows and OS X, and before 11.2.202.508 on Linux;...

Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)

According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...

Adobe AIR for Mac <= 18.0.0.180 Multiple Vulnerabilities (APSB15-16)

According to its version, the installation of Adobe AIR on the remote Mac OS X host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...

CVE-2014-5565

The CVE-2014-5565 entry concerns GadgetTrak Mobile Security (package com.activetrak.android.app) for Android, version 1.6, which does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

openSUSE Security Update : horde4-imp (openSUSE-SU-2012:1626-1)

This version update to version 5.0.24 addresses CVE-2012-5565 bnc791179 to fix XSS vulnerabilities on the compose page traditional view, the contacts popup window, and with certain IMAP mailbox names. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...