58 matches found
Google Chrome < 75.0.3770.80 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 75.0.3770.80. It is, therefore, affected by multiple vulnerabilities as referenced in the 201906stable-channel-update-for-desktop advisory. - Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a...
Unauthorized Access
IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...
CVE-2018-5831
In the KGSL driver in Android releases from CAF using the linux kernel Android for MSM, Firefox OS for MSM, QRD Android before security patch level 2018-06-05, a reference counting error can lead to a Use After Free condition...
CVE-2018-5831
CVE-2018-5831 affects the KGSL driver in CAF Android builds that use the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android). The vulnerability stems from a reference counting error that can trigger a Use-After-Free condition. The impact is described in the Android/CAF context as a lo...
CVE-2017-5831
Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote attackers to hijack web sessions via the session ID...
CVE-2017-5831
Revive Adserver is affected by CVE-2017-5831: a session fixation vulnerability in the forgot password flow prior to version 4.0.1. The issue allows an attacker to hijack a user session by targeting the session ID during password reset. Affected software is Revive Adserver (prior to 4.0.1); root c...
CVE-2015-5831
CVE-2015-5831 affects Apple iOS prior to 9: NetworkExtension in the kernel fails to initialize an unspecified data structure, enabling a crafted app to read kernel memory layout. Veracode and Nessus references corroborate kernel memory disclosure as the impact. Remediation is to apply iOS 9 (and ...
CVE-2014-5831
CVE-2014-5831 concerns the Android app “The Hotel Story: Resort Simulation” (com.happylabs.hotelstory) version 1.7.9B. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information ...
IBM Domino 9.x < 9.0.1 Fix Pack 1 Multiple Vulnerabilities (uncredentialed check)
According to its version, the IBM Domino formerly IBM Lotus Domino on the remote host is 9.x prior to 9.0.1 Fix Pack 1 FP1. It is, therefore, affected by the following vulnerabilities : - A stack overflow issue exists due to the insecure '-z execstack' flag being used during compilation, which...
Low: Red Hat Security Advisory: Red Hat Network Satellite server IBM Java Runtime security update
Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.4, 5.5 and 5.6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...
RHEL 5 / 6 : java-1.6.0-ibm (RHSA-2013:1508)
Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...
Critical: Red Hat Security Advisory: java-1.7.0-ibm security update
Updated java-1.7.0-ibm packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...
CVE-2013-5831 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-21-openj9...
Design/Logic Flaw
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5818 and CVE-2013-5831...
CVE-2013-5819
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5818 and CVE-2013-5831...
Design/Logic Flaw
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5819 and CVE-2013-5831...
CVE-2013-5831
CVE-2013-5831 is part of a cluster of Java-related vulnerabilities disclosed with the Oracle October 2013 CPU. Publicly documented entries (CVE-2013-5456, 5457, 5458, 4041, 5372, 5375, 5843, 5789, 5830, 5829, 5787, 5788, 5824, 5842, 5782, 5817, 5809, 5814, 5832, 5850, 5838, 5802, 5812, 5804, 5783...
CVE-2006-5831
CVE-2006-5831 concerns a PHP remote file inclusion vulnerability in All In One Control Panel (AIOCP) prior to or including version 1.3.007. The flaw is in admin/code/index.php, where the load_page parameter can be supplied via a URL to cause arbitrary PHP code execution on the server. This affect...