42 matches found
Ubuntu: Security Advisory (USN-3460-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-7087
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...
CVE-2017-7087
CVE-2017-7087 affects Apple’s WebKit in several platforms (iOS < 11, Safari < 11, iCloud for Windows < 7.0, iTunes for Windows < 12.7, tvOS
CVE-2017-7087
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...
WebKitGTK+ Code Execution / Cookie Handling / Memory Corruption Vulnerabilities
WebKitGTK+ has had numerous security vulnerabilities addressed including arbitrary code execution, memory corruption, cookie theft, and various other issues. ------------------------------------------------------------------------ WebKitGTK+ Security Advisory...
Apple iTunes < 12.7 WebKit Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is prior to 12.7. It is, therefore, affected by multiple vulnerabilities in webkit. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenable Network...
macOS : Apple Safari < 11.0 Multiple Vulnerabilities
The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.0. It is, therefore, affected by multiple vulnerabilities as described in the HT208116 security advisory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103360;...
CVE-2016-7087
Vulnerability: CVE-2016-7087 affects VMware Horizon View Connection Server. A directory traversal flaw in the loggerBean/loadConfig path allows information disclosure. Affected versions are Horizon View 5.x before 5.3.7, 6.x before 6.2.3, and 7.x before 7.0.1. Impact: remote attackers could discl...
VMSA-2016-0015:VMware Horizon View updates address directory traversal vulnerability
VMSA-2016-0015 VMware Horizon View updates address directory traversal vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0015 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware Horizon View updates address directory traversa...
Apple QuickTime Multiple Vulnerabilities (Jan 2016) - Windows
Apple QuickTime is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:quicktime";...
Memory corruption
Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7087, CVE-2015-7088, CVE-2015-7089, CVE-2015-7090, CVE-2015-7091,...
CVE-2015-7087
Technical details about CVE-2015-7087 are not publicly provided in the supplied documents. Connected EUVD entries describe malware in sbrugna but do not elaborate this CVE. Monitor for updates.
KLA10731 Multiple vulnerabilities in Apple QuickTime
An unspecified vulnerabilities were found in Apple QuickTime. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed movie file. Original advisories Apple advisory Related...
CVE-2014-7087
The CVE refers to the Android app Top Roller Coasters Europe 1 (com.appaapps.top10tallesteuropeanrollercoasters1). It suffers from not verifying X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. T...
GLSA-201405-08 : ClamAV: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201405-08 ClamAV: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ClamAV. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send a specially crafted file,...
SuSE 10 Security Update : acroread (ZYPP Patch Number 7087)
Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. The fixed security issues have been tracked as : - CVE-2010-1297 - CVE-2010-1240 - CVE-2010-1285 - CVE-2010-1295 - CVE-2010-2168 - CVE-2010-2201 - CVE-2010-2202 - CVE-2010-2203 - CVE-2010-2204 -...
OpenPro Remote File Inclusion Vulnerability
This host is installed with OpenPro and is prone to Remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbopenprofileincvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ OpenPro Remote File Inclusion Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...
CVE-2008-7087
OpenPro 1.3.1 is affected by CVE-2008-7087: a remote file inclusion vulnerability in search_wA.php that allows an attacker to execute arbitrary PHP code via a URL supplied to the LIBPATH parameter. The OpenVAS entry corroborates a remote file inclusion issue in OpenPro. No remediation details are...
