42 matches found
Photon OS 1.0: Kibana PHSA-2020-1.0-0321
An update of the kibana package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0321. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid14163...
Photon OS 3.0: Kibana PHSA-2020-3.0-0135
An update of the kibana package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0135. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140411;...
Elastic Kibana < 6.8.11, 7.x < 7.8.1 Multiple Vulnerabilities - Linux
Kibana is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana"; ifdescription...
Elastic Kibana < 6.8.11, 7.x < 7.8.1 Multiple Vulnerabilities - Windows
Kibana is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana"; ifdescription...
CVE-2020-7016
CVE-2020-7016 affects Kibana versions before 6.8.11 and before 7.8.1, where a Timelion-related DoS allows an unauthenticated or minimal-auth user to trigger a crafted URL that can cause Kibana to consume excessive CPU and become unresponsive. This is supported by multiple sources (OSV and Nessus ...
CVE-2019-7016
CVE-2019-7016 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2018-7016
This CVE entry is rejected/not used and does not represent an active vulnerability.
About the security content of macOS Sierra 10.12.6, Security Update 2017-003 El Capitan, and Security Update 2017-003 Yosemite - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
macOS and Mac OS X Multiple Vulnerabilities (Security Update 2017-003)
The remote host is running Mac OS X 10.10.5, Mac OS X 10.11.6, or macOS 10.12.5 and is missing a security update. It is therefore, affected by multiple vulnerabilities : - An overflow condition exists in the curl component in the dprintfformatf function that is triggered when handling floating...
CVE-2017-7016
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "afclip" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted audio file...
CVE-2017-7016
CVE-2017-7016 affects Apple macOS prior to 10.12.6, via the afclip component. A memory corruption flaw in afclip when processing crafted audio files can lead to arbitrary code execution or memory corruption/application crash. Apple’s security update for macOS Sierra 10.12.6 (and related El Capita...
CVE-2016-7016
Technical details about CVE-2016-7016 are not publicly provided in the supplied documents. Monitor for updates from official advisories; the connected EUVD entries do not supply product/version/impact/remediation specifics for this CVE.
CVE-2015-7016
The MCX Application Restrictions component in Apple OS X before 10.11.1, when Managed Configuration is enabled, mishandles provisioning profiles, which allows attackers to bypass intended entitlement restrictions and gain privileges via a crafted developer-signed app...
CVE-2015-7016
The CVE-2015-7016 issue affects Apple Mac OS X (MCX Application Restrictions) prior to OS X 10.11.1 where Managed Configuration mishandles provisioning profiles. This enables a crafted developer-signed app to bypass entitlement restrictions and gain privileges, due to a flaw in how provisioning p...
CVE-2014-7016
The CVE-2014-7016 entry concerns the Mahasna Batik (com.batik.mahasna) Android app (version 1.0). The root cause is failure to verify X.509 certificates when establishing SSL connections, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certific...
CVE-2013-7016
CVE-2013-7016 affects FFmpeg up to version 2.1, where get_siz in libavcodec/jpeg2000dec.c may fail to enforce expected sample separation when processing JPEG2000 data. This can lead to an out-of-bounds array access and remote denial of service, with potential unspecified impact. The issue arises ...
CVE-2008-7016
CVE-2008-7016 affects tnftpd; before 20080929, it splits large command strings into multiple commands, enabling remote attackers to perform a cross-site request forgery (CSRF) via unknown vectors, likely involving a crafted ftp:// link to a tnftpd server. According to the sources, this is a netwo...