79 matches found
CVE-2019-6456
GNU Recutils 1.8 contains a NULL pointer dereference in rec_fex_size() (rec-fex.c, librec.a). This CVE-2019-6456 is reflected across multiple advisories (OSV, CNVD, UBUNTU NASL/Nessus plugins) with consistent wording: a NULL pointer dereference in rec_fex_size(); no public exploit details in the ...
CVE-2019-6456
An issue was discovered in GNU Recutils 1.8. There is a NULL pointer dereference in the function recfexsize in the file rec-fex.c of librec.a...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affecting IBM Tivoli Monitoring clients
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition that is used by IBM Tivoli Monitoring clients. This also includes a fix for the Padding Oracle On Downgraded Legacy Encryption POODLE SSLv3 vulnerability CVE-2014-3566. These were disclosed as part of...
Security Bulletin: Multiple vulnerabilities in current releases of IBM® WebSphere Real Time
Summary Java SE issues disclosed in the Oracle October 2014 Critical Patch Update, plus the POODLE SSLv3 vulnerability and one additional vulnerability Vulnerability Details CVE IDs: CVE-2014-6513 CVE-2014-6456 CVE-2014-6503 CVE-2014-6532 CVE-2014-4288 CVE-2014-6493 CVE-2014-6492 CVE-2014-6458...
CVE-2017-6456
CVE-2017-6456 is rejected/not used; the CNA withdrew it as not a security issue.
SUSE: Security Advisory for java-1_7_1-ibm (SUSE-SU-2014:1549-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory for java-1_7_0-ibm (SUSE-SU-2015:0344-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GE MDS PulseNET Hidden Support Account Remote Code Execution (CVE-2015-6456)
A default credential vulnerability has been reported in GE MDS PulseNET. The vulnerability is due to static credentials of a hidden support account permitting administrator access to the system. A remote attacker can exploit these default credentials to access the system. Once authenticated, the...
CVE-2015-6456
GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise are affected versions prior to 3.1.5, which contain hard-coded credentials for a hidden support account. This enables remote attackers to obtain administrative access and potentially execute arbitrary code. Public advisories (ZDI-15-440; ...
Fedora Update for libvirt FEDORA-2015-1883
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE 11.3 Security Update : IBM Java (SAT Patch Number 9999)
java-170-ibm has been updated to version 1.7.0sr7.2 to fix 21 security issues. These security issues have been fixed : - Unspecified vulnerability. CVE-2014-3065 - The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier...
RHEL 6 : java-1.7.0-ibm (RHSA-2014:1882)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1882 advisory. IBM Java SE version 7 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several...
RHEL 6 / 7 : java-1.7.1-ibm (RHSA-2014:1880)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1880 advisory. IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes...
RHEL 5 : java-1.7.0-ibm (RHSA-2014:1876)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1876 advisory. IBM Java SE version 7 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several...
Oracle Java SE JRE Multiple Unspecified Vulnerabilities-03 (Oct 2014) - Linux
Oracle Java SE JRE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Java SE remote security vulnerability(CVE-2 0 1 4-6 4 5 6)-vulnerability warning-the black bar safety net
Affected system: OracleJava SE 8u20 Oracle Java SE 7u67 Description: BUGTRAQ ID: 7 0 5 2 2 CVECAN ID: CVE-2 0 1 4-6 4 5 6 Java SE is based on the JDK and the JRE of the Java Platform, Standard Edition, for developing and deploying desktop, server and embedded devices and real-time environment of ...
CVE-2014-6456
CVE-2014-6456 is an unspecified vulnerability in Oracle Java SE Deployment affecting Java 7u67 and 8u20 with a base impact of CONFIDENTIALITY, INTEGRITY, and AVAILABILITY (score 9.3). IBM security bulletins also reference this CVE with high severity and list remediation through applying vendor fi...
KLA10505 Multiple vulnerabilities in Oracle products
An unspecified vulnerabilities were found in Oracle products. By exploiting these vulnerabilities malicious users can affect integrity, confidentiality and vulnerability. These vulnerabilities can be exploited remotely via an unknown vectors related to JSSE, JAXP, AWT, 2D, Deployment, Libraries,...
openSUSE Security Update : libvirt (openSUSE-SU-2014:0593-1)
libvirt was updated to fix various bugs and security issues : CVE-2013-7336: libvirt: unprivileged user can crash libvirtd during spice migration CVE-2013-6456: unsafe usage of paths under /proc/$PID/root Bugfixes for libvirt client killed on reboot shutdown. bnc852005 Also notify systemd when we...