CentOS 6 : kernel (CESA-2017:0036)

An update for kernel is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Apache Struts REST Plugin DMI Code Execution (CVE-2016-3087)

A code execution vulnerability exists in Apache Struts. The vulnerability is due the way the OGNL expressions are processed when DMI is enabled and the REST plugin is used. A remote attacker could exploit this vulnerability by sending a crafted request to the target server. Successful exploitatio...

Immunity Canvas: STRUTS2_DMI_RCE

Name| struts2dmirce ---|--- CVE| CVE-2016-3081 Exploit Pack| CANVAS Description| struts2dmirce Notes| CVE Name: CVE-2016-3081 VENDOR: Apache NOTES: The JAR Server will listen on the port provided in the UI. However, if that port is unavailable, a random one will be chosen. Example vulnerable...

ByVejr - DMI - Yr - Vejret - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ByVejr - DMI - Yr - Vejret published at the 'play' market has multiple vulnerabilities...

DMI Weather - Exported components, External URLs, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application DMI Weather published at the 'play' market has multiple vulnerabilities...

MySQL Enterprise Monitor 3.0.x < 3.0.5 Apache Struts DMI Multiple Vulnerabilities

According to its self-reported version, the MySQL Enterprise Monitor running on the remote host is affected by multiple unspecified vulnerabilities related to dynamic method invocation DMI in the bundled version of Apache Struts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Solaris 2.6/7.0/8 snmpXdmid Buffer Overflow Vulnerability (msf)

No description provided by source. source: http://www.securityfocus.com/bid/2417/info Versions 2.6, 7, and 8 of Sun Microsystem's Solaris operating environment ship with service called 'snmpXdmid'. This daemon is used to map SNMP management requests to DMI requests and vice versa. SnmpXdmid...

Solaris 7.0 DMI Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/878/info DMI is the Desktop Management Interface, and is a suite of application management programs shipped with Sun's Solaris. Each application that is managed through DMI has a MIF record which contains information abou...

Apache Struts 2 'action:' Parameter Prefix Security Constraint Bypass

The remote web application appears to use Struts 2, a web framework used for creating Java web applications. The version of Struts 2 in use is affected by a security constraint bypass vulnerability due to a flaw in the action mapping mechanism. Under certain unspecified conditions, an attacker...

Oracle Linux 5 : kernel (ELSA-2013-0594-1)

From Red Hat Security Advisory 2013:0594 : Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVS...

CentOS Update for kernel CESA-2013:0594 centos5

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2013:0594 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

CentOS 5 : kernel (CESA-2013:0594)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

Low: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

kernel security and bug fix update

kernel 2.6.18-348.2.1 - misc tainted flags, fix buffer size Prarit Bhargava 905829 901547 - net be2net: fix unconditionally returning IRQHANDLED in INTx Ivan Vecera 884704 878316 - net be2net: fix INTx ISR for interrupt behaviour on BE2 Ivan Vecera 884704 878316 - net be2net: fix a possible...

VirtualPC Virtual Machine detection (dmidecode)

According to the DMI information, the remote host is a VirtualPC virtual machine. Since it is physically accessible through the network, ensure that its configuration matches your organization's security policy. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid47800;...

VMware Virtual Machine detection (dmidecode)

According to the DMI information, the remote host is a VMware virtual machine. Since it is physically accessible through the network, ensure that its configuration matches your organization's security policy. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid47761;...

VirtualBox Virtual Machine detection (dmidecode)

According to the DMI information, the remote host is a VirtualBox virtual machine. Since it is physically accessible through the network, ensure that its configuration matches your organization's security policy. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid47801;...

Memory Information (via DMI)

Using the SMBIOS aka DMI interface, it was possible to retrieve information about the remote system's memory devices, such as the total amount of installed memory. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid45433; scriptversion "1.3"; scriptcvsdate"Date: 2018/03/2...

System Information Enumeration (via DMI)

Using the SMBIOS aka DMI interface, it was possible to retrieve information about the remote system's hardware, such as its product name and serial number. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid35351; scriptversion"1.12";...

Sun Solaris snmpXdmid(1M)远程拒绝服务漏洞

BUGTRAQ ID: 29965 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 运行在Solaris上的Sun Solstice企业SNMP-DMI映射器子代理守护程序（snmpXdmid1M）中的安全漏洞可能允许本地或远程非特权用户通过发送畸形报文杀死守护程序进程。如果出现了上述漏洞，snmpXdmid会core dump，core文件的pstack输出类似于： core 'core' of 362: /usr/lib/dmi/snmpXdmid -s hostname ----------------- lwp 2 / thread 2...