F5 Networks BIG-IP : BIG-IP TMM vulnerability (K76328112)

BIG-IP virtual servers with Loose Initiation enabled on a FastL4 profile may be subject to excessive flow usage under undisclosed conditions. CVE-2019-6683 Impact This vulnerability is present only on BIG-IP Virtual Edition VE systems with limited bandwidth licenses. BIG-IP VE products with...

CVE-2019-6683

CVE-2019-6683 affects BIG-IP BIG-IP LTM/VE with Loose Initiation on a FastL4 profile and limited-bandwidth licenses. Affected versions include 11.5.2–11.6.5.1, 12.1.0–12.1.5, 13.1.0–13.1.3, 14.0.0–14.0.1, 14.1.0–14.1.2.2, and 15.0.0–15.0.1.1. Impact is excessive flow usage leading to memory growt...

Type confusion

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.1.0.5096. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2018-14317

Foxit Reader 9.1.0.5096 is affected by a PDF processing type-confusion vulnerability that enables remote code execution when a user opens a malicious page/file. Root cause is improper validation of user-supplied data during PDF handling, allowing an attacker to execute code in the current process...

CVE-2018-6683

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention DLP for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline...

CVE-2018-6683

Summary: CVE-2018-6683 affects McAfee Data Loss Prevention (DLP) for Windows. The vulnerability stems from an incorrectly configured access control security level that enables a local attacker to bypass DLP policy by editing a local policy file while offline. Affected versions are McAfee DLP for ...

CVE-2017-6683

CVE-2017-6683 affects Cisco Elastic Services Controller, specifically the esc_listener.py script. An authenticated, remote attacker could execute arbitrary commands as the tomcat user due to insufficient sanitization of arguments during authentication to the monitoring daemon (port 6000). Affecte...

CVE-2016-6683

CVE-2016-6683 is an information-disclosure vulnerability in the Android kernel affecting Nexus devices running before the 2016-10-05 patch. The issue, associated with internal bug 30143283, allows a crafted application to obtain sensitive information from kernel components. Connected documents co...

Adobe Reader < 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30094 or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and...

Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...

CVE-2015-6683

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via...

CVE-2015-6683

Technical details for CVE-2015-6683 are not provided in the connected documents; the EUVD entries mention malware but lack specifics on affected products, root cause, or remediation. Monitor for updates.

CVE-2014-6683

The CVE-2014-6683 entry concerns the Open Electrical Webser (com.wOpenElectricalWeb) Android app version 0.1, which fails to verify X.509 certificates from SSL servers. Root cause: missing certificate verification in the app’s TLS handling. Consequence: MITM attackers could spoof servers and capt...

CVE-2013-6683

CVE-2013-6683 affects Cisco NX-OS IPv6 neighbor-table handling. The issue arises when processing adjacencies in the IPv6 neighbor table, allowing remote, adjacent attackers to trigger a denial of service (NS processing outage) by sending a sequence of malformed IPv6 packets. Impact is described a...

SuSE 10 Security Update : libtool (ZYPP Patch Number 6683)

libtool: libltdl may load modules from the current working directory. CVE-2009-3736 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2008-6683

CVE-2008-6683 is an XSS in the Apartment Search Script (listtest.php) that allows remote attackers to inject arbitrary web script or HTML via the r parameter. Affected component: listtest.php; root cause: insufficient input sanitization on the r parameter enabling script execution in the victim’s...

Gentoo Security Advisory GLSA 200803-13 (vlc)

The remote host is missing updates announced in advisory GLSA 200803-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1543-1 (vlc)

The remote host is missing an update to vlc announced via advisory DSA 1543-1. OpenVAS Vulnerability Test $Id: deb15431.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1543-1 vlc Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1543-1 : vlc - several vulnerabilities

Luigi Auriemma, Alin Rad Pop, Remi Denis-Courmont, Quovodis, Guido Landi, Felipe Manzano, Anibal Sacco and others discovered multiple vulnerabilities in vlc, an application for playback and streaming of audio and video. In the worst case, these weaknesses permit a remote, unauthenticated attacker...