1988 matches found
Debian Security Advisory DSA 3670-1 (tomcat8 - security update)
Dawid Golunski of LegalHackers discovered that the Tomcat init script performed unsafe file handling, which could result in local privilege escalation. OpenVAS Vulnerability Test $Id: deb3670.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3670-1 using nvtgen 1.0 Script...
DSA-3669-1 tomcat7 - security update
Bulletin has no description...
DSA-3670-1 tomcat8 - security update
Bulletin has no description...
Hancom Hangul HCell OfficeArt Record pConnectionSites and pVertices Code Execution Vulnerability
Talos Vulnerability Report TALOS-2016-0149 Hancom Hangul HCell OfficeArt Record pConnectionSites and pVertices Code Execution Vulnerability August 4, 2016 CVE Number CVE-2016-4294 Description This vulnerability was discovered within the Hangul Hcell application which is part of the Hangul Office...
Security update for ImageMagick (important)
ImageMagick was updated to fix 66 security issues. These security issues were fixed: - CVE-2014-9810: SEGV in dpx file handler. bsc983803. - CVE-2014-9811: Crash in xwd file handler bsc984032. - CVE-2014-9812: NULL pointer dereference in ps file handling bsc984137. - CVE-2014-9813: Crash on...
MS16-032 Secondary Logon Handle local mention the right vulnerability
No description provided by source. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/payloadgenerator' require 'msf/core/exploit/powershell' require 'rex' class MetasploitModule...
PHP < 5.6.18, 7.x < 7.0.3 DoS Vulnerability (Jul 2016) - Linux
PHP is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...
CVE-2016-1420
The installation component on Cisco Application Policy Infrastructure Controller APIC devices with software before 1.32f mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCuz72347...
CVE-2016-0879
Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain sensitive information by requesting these files at an unspecified URL...
Founder's FIT Handling FIT File Memory Corruption Vulnerability (CNVD-2016-01770)
Founder Fetion is a comprehensive typesetting software integrating images, texts and forms developed by Beijing Beifang Founder Electronics Co. A memory corruption vulnerability exists in Founder Fetion's handling of FIT files, which allows an attacker to exploit this vulnerability to construct a...
Adobe Flash Player Use After Free Code Execution (APSB16-08: CVE-2016-0987)
A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...
Adobe Flash Player Use After Free Code Execution (APSB16-08: CVE-2016-0994)
A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...
Adobe Flash Player Use After Free Code Execution (APSB16-08: CVE-2016-0996)
A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...
Cisco Prime Infrastructure Remote Code Execution Vulnerability
Cisco Prime Infrastructure is a solution for wireless management through Cisco Technologies LMS and NCS. Cisco Prime Infrastructure has a remote code execution vulnerability in log file handling, which allows an authenticated, remote attacker to alter system file logs to execute arbitrary code...
Fedora 23 : pcre-8.38-1.fc23 (2015-994f0b3021)
This release fixes various bugs when compiling or matching expressions. It also fixes how pcregrep handles binary files. It also fixes a heap-based buffer overflow in pcreexec when ovector has size 1 bug 1285415 Note that Tenable Network Security has extracted the preceding description block...
PHP 5.5.x < 5.5.32 / 5.6.x < 5.6.18 / 7.0.x < 7.0.3 Multiple Vulnerabilities
Binary data 9093.prm...
Adobe Flash Player Use After Free Code Execution (APSB16-04: CVE-2016-0974)
A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...
Adobe Flash Player Use After Free Code Execution (APSB16-04: CVE-2016-0959)
A remote code execution vulnerability has been reported in Adobe Flash Player. The vulnerability is due to a use-after-free error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially craft...
Microsoft Office Word Viewer Remote Code Execution Vulnerabilities (3134226)
This host is missing a critical security update according to Microsoft Bulletin MS16-015. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...