45 matches found
Photon OS 3.0: Kibana PHSA-2020-3.0-0135
An update of the kibana package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0135. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140411;...
CVE-2020-7017
A stored Cross-site scripting XSS flaw was found in the region map visualization in kibana. This flaw allows an attacker who can edit or create a region map visualization to obtain sensitive information or perform destructive actions on behalf of kibana users who view the region map visualization...
Elastic Kibana < 6.8.11, 7.x < 7.8.1 Multiple Vulnerabilities - Linux
Kibana is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana"; ifdescription...
Elastic Kibana < 6.8.11, 7.x < 7.8.1 Multiple Vulnerabilities - Windows
Kibana is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:kibana"; ifdescription...
CVE-2020-7017
CVE-2020-7017 is a stored XSS in the Kibana region map visualization, affecting Kibana before 6.8.11 and 7.8.1. An attacker who can edit/create a region map could execute scripts in viewers’ browsers and potentially access or perform actions on behalf of Kibana users. Remediation in the public ad...
CVE-2018-7017
CVE-2018-7017 is rejected/not used per the description.
macOS and Mac OS X Multiple Vulnerabilities (Security Update 2017-003)
The remote host is running Mac OS X 10.10.5, Mac OS X 10.11.6, or macOS 10.12.5 and is missing a security update. It is therefore, affected by multiple vulnerabilities : - An overflow condition exists in the curl component in the dprintfformatf function that is triggered when handling floating...
CVE-2017-7017
CVE-2017-7017 affects macOS before 10.12.6, involving the Intel Graphics Driver. It enables arbitrary code execution in a privileged context or a denial of service through a crafted app due to a memory corruption issue. Apple’s security content updates in macOS 10.12.6 (Security Update 2017-003) ...
CVE-2016-7017
Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
CVE-2016-7017
Technical details for CVE-2016-7017 are not publicly available in the provided documents. Monitor for updates from the vendor and security advisories for affected product versions and mitigation steps once details are released.
CVE-2016-7017
Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...
CVE-2015-6992
CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-7017...
Memory corruption
CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6992 and CVE-2015-7017...
CVE-2015-7017
CoreText in Apple iOS <9.1, OS X <10.11.1, and iTunes
CVE-2015-6992
CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-7017...
CVE-2015-7017
CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-6975 and CVE-2015-6992...
KLA10685 Multiple vulnerabilities at Apple iTunes
Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. Multiple memory corruptions at WebKit can be exploited via iTunes Store...
CVE-2014-7017
The Tim Ban Bon Phuong aka com.entertaiment.timbanbonphuong application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7017
The CVE-2014-7017 entry describes an Android app, Tim Ban Bon Phuong (com.entertaiment.timbanbonphuong) version 2.2, that does not verify SSL/TLS X.509 certificates. This misconfiguration in the app’s network code enables man-in-the-middle attackers to spoof servers and obtain sensitive informati...
CVE-2013-7017
FFmpeg vulnerability CVE-2013-7017 involves libavcodec/jpeg2000.c and affects FFmpeg before 2.1, where crafted JPEG2000 data can trigger a remote denial of service (invalid pointer dereference). The issue is corroborated by multiple sources in connected docs, including Gentoo GLSA-201603-06 and r...