ESA-2012-009: EMC Documentum Content Server privilege elevation vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-009: EMC Documentum Content Server privilege elevation vulnerability. EMC Identifier: ESA-2012-009 EMC Identifier: CS-16072 EMC Identifier: CS-16073 CVE Identifier: CVE-2011-4144 Severity Rating: CVSS v2 Base Score: 6.8...

Debian Security Advisory DSA 2358-1 (openjdk-6)

The remote host is missing an update to openjdk-6 announced via advisory DSA 2358-1. OpenVAS Vulnerability Test $Id: deb23581.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2358-1 openjdk-6 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2356-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2358-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Elevating Privileges Via Windows Installers

There’s an odd bit of behavior that some Windows systems will exhibit when certain kinds of installers are launched, automatically elevating the privileges of the installer process to system-level privileges. In theory, the issue shouldn’t be exploitable because at one point in the process the...

Oracle WebLogic Portal Elevation of Privilege (CVE-2008-5462)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified privilege elevation vulnerability in the portal component that could be exploited remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Vulnerability in NVIDIA Stereoscopic 3D Driver Could Allow Elevation of Privilege

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting the NVIDIA Stereoscopic 3D driver. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, NVIDIA. NVIDIA has...

CVE-2011-3408

Csrsrv.dll in the Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly check permissions for sending inter-process...

Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability (2620712)

This host is missing an important security update according to Microsoft Bulletin MS11-097. OpenVAS Vulnerability Test $Id: secpodms11-097.nasl 5362 2017-02-20 12:46:39Z cfi $ Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability 2620712 Authors: Rachana Shetty Copyright:...

Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)

This host is missing an important security update according to Microsoft Bulletin MS11-088. OpenVAS Vulnerability Test $Id: secpodms11-088.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Office IME Chinese Privilege Elevation Vulnerability 2652016 Authors: Antu Sanadi Copyright: Copyright c 2011...

Microsoft Office IME (Chinese) Privilege Elevation Vulnerability (2652016)

This host is missing an important security update according to Microsoft Bulletin MS11-088. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Windows Client/Server Run-time Subsystem Privilege Elevation Vulnerability (2620712)

This host is missing an important security update according to Microsoft Bulletin MS11-097. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel Privilege Elevation Vulnerability (2633171)

This host is missing an important security update according to Microsoft Bulletin MS11-098. OpenVAS Vulnerability Test $Id: secpodms11-098.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Windows Kernel Privilege Elevation Vulnerability 2633171 Authors: Madhuri D Copyright: Copyright c 2011 SecPod,...

Microsoft Windows Kernel Privilege Elevation Vulnerability (2633171)

This host is missing an important security update according to Microsoft Bulletin MS11-098. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS11-098: Vulnerability in Windows Kernel Could Allow Elevation of Privilege (2633171)

The remote host is running a Windows kernel version that is affected by a privilege escalation vulnerability due to the way the kernel accesses an object that has not been correctly initialized. A local attacker could exploit this issue by running a specially crafted program on the remote host. C...

MS11-097: Vulnerability in Windows Client/Server Runtime Subsystem could allow elevation of privilege: December 13, 2011

None None...

MS11-098: Vulnerability in Windows Kernel could allow elevation of privilege: December 13, 2011

None None...

Oracle WebLogic WLS Unspecified Vulnerability (CVE-2008-5461)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host has an unspecified vulnerability in WebLogic Console that can be exploited remotely and may allow information disclosure and elevation of privileges. %NASLMINLEVEL 70300 C Tenable Network...

Issue key can be enumerated - Resolve Issue Feature

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that the application is succeptible to horizontal privilege elevation attacks within the Resolve Issue feature, accessible through the given address:...

Issue key can be enumerated - Resolve Issue Feature

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that the application is succeptible to horizontal privilege elevation attacks within the Resolve Issue feature, accessible through the given address:...