13610 matches found
CentOS 7 : samba (CESA-2017:1950)
An update for samba is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
RHEL 7 : httpd (RHSA-2017:2479)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2479 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: It was discovered that...
OSNEXUS QuantaStor v4 Virtual Appliance Information Disclosure Vulnerability
OSNEXUS QuantaStor v4 virtual appliance is a virtual storage appliance from OSNEXUS USA. An information disclosure vulnerability exists in OSNEXUS QuantaStor v4 virtual appliance versions prior to 4.3.1. The vulnerability can be exploited by an attacker to enumerate valid accounts on a system by...
RHEL 7 : libsoup (RHSA-2017:2459)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2459 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: A stack-based buffer overflow flaw was discovered within th...
Oracle Web Analytics Unauthorized Operation Vulnerability
Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software. web analytics is one of the components used to measure, collect, and analyze data on the Web. A security vulnerability exists in the Common Libraries subcomponent of the Web Analyti...
CVE-2017-10142
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications subcomponent: Mobile Apps. Supported versions that are affected are 8.5.1 and 9.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2017-10113
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite subcomponent: CRM User Management Framework. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network acces...
Buffer overflow
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite subcomponent: CRM User Management Framework. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network acces...
CVE-2017-10113
CVE-2017-10113 affects Oracle E-Business Suite, Oracle Common Applications CRM User Management Framework (CRM UMF) with affected versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6. The vulnerability is exploitable over HTTP by an unauthenticated attacker and requires user interaction for exploitatio...
CVE-2017-10113
Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite subcomponent: CRM User Management Framework. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network acces...
August 8, 2017—KB4034672 (Security-only update)
None None...
Security update for the Windows CLFS elevation of privilege vulnerability in Windows Server 2008: August 8, 2017
Security update for the Windows CLFS elevation of privilege vulnerability in Windows Server 2008: August 8, 2017 Summary An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory. To learn more about the vulnerability, ...
Windows 8.1 and Windows Server 2012 R2 August 2017 Security Updates
The remote Windows host is missing security update 4034672 or cumulative update 4034681. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when Microsoft Windows improperly handles NetBIOS packets. An attacker who successfully exploited this...
KLA11846 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...
Windows Server 2012 August 2017 Security Updates
The remote Windows host is missing security update 4034666 or cumulative update 4034665. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when Microsoft Windows improperly handles NetBIOS packets. An attacker who successfully exploited this...
Windows 7 and Windows Server 2008 R2 August 2017 Security Updates
The remote Windows host is missing security update 4034679 or cumulative update 4034664. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when Microsoft Windows improperly handles NetBIOS packets. An attacker who successfully exploited this...
Microsoft Windows CLFS Driver Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Common Log...