Solaris 10 (x86) : 145802-06

SunOS 5.10x86: ssh patch. Date this patch was last updated by Sun : Jun/03/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 148870-01

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: mailx1. Supported versions that are affected are 8, 9, 10 and 11. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update,...

Solaris 10 (sparc) : 148948-01

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: bsmconv1M, bsmunconv1M. Supported versions that are affected are 8, 9 and 10. Very difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in...

Solaris 10 (sparc) : 144891-02

SunOS 5.10: libss.so.1 patch. Date this patch was last updated by Sun : Oct/28/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 148625-01

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: in.tnamed1M. Supported versions that are affected are 9 and 10. Easily exploitable vulnerability allows successful unauthenticated network attacks via NameServer. Successful attack of this vulnerability can result i...

Fedora 27 : clamav (2018-602b5345fa)

Update to 0.99.4 0.99.4 addresses a few outstanding vulnerability bugs. It includes fixes for : - CVE-2012-6706 - CVE-2017-6419 - CVE-2017-11423 - CVE-2018-1000085 There are also a few bug fixes that were not assigned CVEs, but were important enough to address while we had the chance. One of thes...

Security fix for the ALT Linux 10 package clamav version 0.99.4-alt1

March 4, 2018 Sergey Y. Afonin 0.99.4-alt1 - 0.99.4 CVE-2012-6706, CVE-2017-6419, CVE-2017-11423, CVE-2018-0202, and CVE-2018-1000085...

CVE-2012-3536

Two XSS vulnerabilities were fixed in Hupa Webmail (Apache James project) affecting the message list and message view. An attacker could exploit by sending a crafted email that triggers XSS when opened or when the message list is viewed. The issue is reported as addressed in Hupa 0.0.3. No exploi...

CVE-2012-6709

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation...

CVE-2012-6709

CVE-2012-6709 concerns Elinks 0.12 and Twibright Links 2.3 failing to validate SSL certificates. Connected advisories (EulerOS) and Nessus plugins reference the same issue and identify this as an unpatched vulnerability affecting ELINKS-related packages across multiple Linux distributions. The ro...

CVE-2012-6709

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation...

CVE-2012-6709

ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation...

Memory corruption

Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-0759...

CVE-2012-0771

Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2012-0759...

CVE-2012-0771

Technical details about CVE-2012-0771 are not provided in the supplied documents. The connected entries reference related items but do not describe affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

MoinMoin 1.9 < 1.9.5 ACL Security Vulnerability - Linux

MoinMoin does not properly handle group names that contain virtual group names such as SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2012-6347

Fortinet FortiGate FortiDB is affected by CVE-2012-6347 through multiple cross-site scripting (XSS) vulnerabilities in Java number format exception handling prior to 4.4.2. The flaw allows remote attackers to inject arbitrary web script/HTML via the conversationContext parameter across a set of J...

CVE-2012-5359

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file...

CVE-2012-2166

CVE-2012-2166 affects IBM XIV Storage System (MTM 2810-A14, 2812-A14, 2810-114, 2812-114) prior to the specified level. The issue stems from hardcoded passwords for maintenance accounts, enabling remote attackers to gain user access via unknown vectors. IBM X-Force 75041 corroborates the hardcode...

CVE-2012-5360

CVE-2012-5360 affects Libavcodec in FFmpeg prior to 0.11. The vulnerability allows remote code execution through a crafted QT file due to a memory/parse issue in libavcodec. Impact is remote code execution with high severity over network; requires no privileges but user interaction is not require...