46 matches found
Sitefinity 8.1.x < 8.1.5860.0 Multiple Vulnerabilities
The version of Sitefinity installed on the remote host is affected by multiple vulnerabilities : - An XSS vulnerability in Telerik.ReportViewer affects versions 4.2 through 11.0 CVE-2017-9140 - An XSS vulnerability in?Identity Server affects versions 10.0 through 11.0 CVE-2018-17053, CVE-2018-170...
Sitefinity 7.0.x < 7.0.5140.0 Multiple Vulnerabilities
The version of Sitefinity installed on the remote host is affected by multiple vulnerabilities : - An XSS vulnerability in Telerik.ReportViewer affects versions 4.2 through 11.0 CVE-2017-9140 - An XSS vulnerability in?Identity Server affects versions 10.0 through 11.0 CVE-2018-17053, CVE-2018-170...
Sitefinity < 6.0.4230.0 Multiple Vulnerabilities
The version of Sitefinity installed on the remote host is affected by multiple vulnerabilities : - An XSS vulnerability in Telerik.ReportViewer affects versions 4.2 through 11.0 CVE-2017-9140 - An XSS vulnerability in?Identity Server affects versions 10.0 through 11.0 CVE-2018-17053, CVE-2018-170...
CVE-2016-9140
CVE-2016-9140 entry is rejected/not used; withdrawn by CNA as not a security issue.
CVE-2016-9140
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2015-9140
CVE-2015-9140 affects Android devices with Qualcomm Snapdragon Mobile, Snapdragon Wear and listed Small Cell SoCs (e.g., FSM9055, MDM9xxx, MSM8909W, SD family) where the online memory dump feature can allow unauthorized memory access. Root cause: improper protection in the online memory dump path...
CVE-2017-9140
The CVE-2017-9140 issue affects Telerik Reporting for ASP.NET WebForms (Telerik.ReportViewer.WebForms.dll) prior to R1 2017 SP2 (11.0.17.406). It is a reflected XSS vulnerability exploitable via the bgColor parameter to Telerik.ReportViewer.axd, allowing attacker-controlled script/HTML execution ...
GLSA-201612-42 : Zabbix: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201612-42 Zabbix: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Zabbix. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code...
Gentoo Security Advisory GLSA 201502-05
Gentoo Linux Local Security Checks GLSA 201502-05 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Fedora Update for tcpdump FEDORA-2015-4939
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mandriva Linux Security Advisory : tcpdump (MDVSA-2015:125)
Updated tcpdump package fixes security vulnerabilities : The Tcpdump program could crash when processing a malformed OLSR payload when the verbose output flag was set CVE-2014-8767. The application decoder for the Ad hoc On-Demand Distance Vector AODV protocol in Tcpdump fails to perform input...
Debian DLA-102-1 : tcpdump security update
Several vulnerabilities have been discovered in tcpdump, a command-line network traffic analyzer. These vulnerabilities might result in denial of service, leaking sensitive information from memory or, potentially, execution of arbitrary code. NOTE: Tenable Network Security has extracted the...
SUSE-RU-2015:0335-1 Security update for tcpdump
When running tcpdump, a remote unauthenticated user could have crashed the application or, potentially, execute arbitrary code by injecting crafted packages into the network. The following vulnerabilities in protocol printers have been fixed: IPv6 mobility printer remote DoS CVE-2015-0261,...
SUSE-SU-2015:0692-1 Security update for tcpdump
When running tcpdump, a remote unauthenticated user could have crashed the application or, potentially, execute arbitrary code by injecting crafted packages into the network. The following vulnerabilities in protocol printers have been fixed: IPv6 mobility printer remote DoS CVE-2015-0261,...
Fedora 21 : tcpdump-4.6.2-3.fc21 (2014-16823)
Fix for CVE-2014-9140 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora Update for tcpdump FEDORA-2014-16823
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-9140
Buffer overflow in the ppphdlc function in print-ppp.c in tcpdump 4.6.2 and earlier allows remote attackers to cause a denial of service crash cia a crafted PPP packet...
CVE-2014-9140
CVE-2014-9140 is a buffer overflow in the ppp_hdlc function (print-ppp.c) of tcpdump 4.6.2 and earlier. This allows remote attackers to crash tcpdump via a crafted PPP packet, causing a denial of service. Affected: tcpdump 4.6.2 and earlier. Root cause: vulnerability in PPP dissection logic. No r...
