Lucene search
+L

2048 matches found

Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.35 views

Oracle Solaris Third-Party Patch Update : ant (algorithmic_complexity_vulnerability_in_apache)

The remote Solaris system is missing necessary patches to address security updates : - Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream BZip2CompressorOutputStream in Apache Commons Compress before 1.4.1 allows remote attackers to cause a denial of servic...

5CVSS7.1AI score0.12608EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.50 views

Oracle Solaris Third-Party Patch Update : mysql (multiple_vulnerabilities_in_mysql)

The remote Solaris system is missing necessary patches to address security updates : - MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are originally associated...

6CVSS6.7AI score0.18675EPSS
SaveExploits6References6
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.40 views

Oracle Solaris Third-Party Patch Update : libgcrypt (cve_2013_4242_information_disclosure)

The remote Solaris system is missing necessary patches to address security updates : - GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka...

1.9CVSS5.6AI score0.00533EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.193 views

Oracle Solaris Third-Party Patch Update : openssl (cve_2014_0224_cryptographic_issues1)

The remote Solaris system is missing necessary patches to address security updates : - OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length...

7.4CVSS7.5AI score0.95326EPSS
SaveExploits9References3
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.33 views

Oracle Solaris Third-Party Patch Update : libxslt (cve_2012_2807_numeric_errors)

The remote Solaris system is missing necessary patches to address security updates : - Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified...

6.8CVSS8.2AI score0.01583EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.38 views

Oracle Solaris Third-Party Patch Update : apache (multiple_input_validation_vulnerabilities_in1)

The remote Solaris system is missing necessary patches to address security updates : - The davxmlgetcdata function in main/util.c in the moddav module in the Apache HTTP Server before 2.4.8 does not properly remove whitespace characters from CDATA sections, which allows remote attackers to cause ...

5CVSS7.1AI score0.26831EPSS
SaveExploits2References4
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.36 views

Oracle Solaris Third-Party Patch Update : lighttpd (cve_2011_4362_denial_of)

The remote Solaris system is missing necessary patches to address security updates : - Integer signedness error in the base64decode function in the HTTP authentication functionality httpauth.c in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial...

5CVSS6.4AI score0.21106EPSS
SaveExploits8References3
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.33 views

Oracle Solaris Third-Party Patch Update : libcurl (cve_2014_3707_information_disclosure)

The remote Solaris system is missing necessary patches to address security updates : - The curleasyduphandle function in libcurl 7.17.1 through 7.38.0, when running with the CURLOPTCOPYPOSTFIELDS option, does not properly copy HTTP POST data for an easy handle, which triggers an out-of-bounds rea...

4.3CVSS7.6AI score0.05121EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.55 views

Oracle Solaris Third-Party Patch Update : libtiff (cve_2013_4231_buffer_overflow)

The remote Solaris system is missing necessary patches to address security updates : - Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service out-of-bounds write via a crafted 1 extension block in a GIF image or 2 GIF raster image to tools/gif2tiff.c...

6.8CVSS8.6AI score0.07399EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.48 views

Oracle Solaris Third-Party Patch Update : python (cve_2014_7185_integer_overflow)

The remote Solaris system is missing necessary patches to address security updates : - Integer overflow in bufferobject.c in Python before 2.7.8 allows context-dependent attackers to obtain sensitive information from process memory via a large size and offset in a 'buffer' function. CVE-2014-7185...

6.4CVSS7.6AI score0.05122EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.37 views

Oracle Solaris Third-Party Patch Update : tomcat (multiple_vulnerabilities_in_tomcat)

The remote Solaris system is missing necessary patches to address security updates : - Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data...

6.8CVSS8AI score0.11001EPSS
SaveExploits3References4
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.36 views

Oracle Solaris Third-Party Patch Update : tomcat (cve_2011_3375_information_disclosure)

The remote Solaris system is missing necessary patches to address security updates : - Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read...

5CVSS5.6AI score0.0633EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.39 views

Oracle Solaris Third-Party Patch Update : lua (cve_2014_5461_buffer_errors)

The remote Solaris system is missing necessary patches to address security updates : - Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service crash via a small number of arguments to a function with a...

5CVSS5.5AI score0.11714EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.46 views

Oracle Solaris Third-Party Patch Update : net-snmp (cve_2012_6151_resource_management)

The remote Solaris system is missing necessary patches to address security updates : - Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service crash or infinite loop, CPU consumption, and hang by...

4.3CVSS8.2AI score0.09451EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.41 views

Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark8)

The remote Solaris system is missing necessary patches to address security updates : - The ieee802154maprec function in epan/dissectors/packet-ieee802154.c in the IEEE 802.15.4 dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before 1.10.3 uses an incorrect pointer chain, which allows remote...

4.3CVSS6.2AI score0.01987EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.31 views

Oracle Solaris Third-Party Patch Update : keystone (cve_2014_3520_privilege_escalation)

The remote Solaris system is missing necessary patches to address security updates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Oracle Third Party software advisories. include'deprecatednasllevel.inc';...

6.5CVSS5.4AI score0.01907EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.33 views

Oracle Solaris Third-Party Patch Update : squid (multiple_vulnerabilities_in_squid)

The remote Solaris system is missing necessary patches to address security updates : - Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2 allow remote attackers to cause a denial of service memory consumption...

5CVSS7.7AI score0.23026EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.25 views

Oracle Solaris Third-Party Patch Update : net-snmp (cve_2012_2141_denial_of)

The remote Solaris system is missing necessary patches to address security updates : - The perltrapdhandler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service snmptrapd crash via ...

5CVSS7.3AI score0.04619EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.36 views

Oracle Solaris Third-Party Patch Update : tcsd (cve_2012_0698_denial_of)

The remote Solaris system is missing necessary patches to address security updates : - tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service daemon crash via a crafted typeoffset value in a TCP packet to port 30003. CVE-2012-0698 %NASLMINLEVEL 70300 C Tenable Network...

5CVSS5.4AI score0.10509EPSS
SaveExploits3References3
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:00 a.m.49 views

Oracle Solaris Third-Party Patch Update : gnutls (cve_2014_0092_cryptographic_issues)

The remote Solaris system is missing necessary patches to address security updates : - lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoo...

5.8CVSS5.4AI score0.30078EPSS
SaveExploits1References3
Rows per page
Query Builder