284 matches found
Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16409)
A memory corruption vulnerability exists in Adobe Acrobat And Reader. The vulnerability is due to an error in the image conversion engine when processing Enhanced Metafile Format EMF private data. A remote attacker may exploit this vulnerability by using the out of bounds access for unintended...
JavaScript handlers Microsoft Edge Code Execution
The vulnerability of Microsoft Edge’s JavaScript handlers arises from an operation going beyond the buffer boundaries due to a memory object processing error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...
Authentication flaw
A vulnerability in the web-based GUI of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication and execute actions with administrator privileges. The vulnerability is due to a processing error in the role-based access control RBAC of URLs. An attacker could...
Cisco cBR-8 Converged Broadband Router vty Integrity Vulnerability
A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line configuration on an affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptio...
Cisco cBR-8 Converged Broadband Router vty Integrity Vulnerability
A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line configuration on an affected device. The vulnerability is due to a logic processing error that exis...
PT-2016-6912
Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers versions 15.53S2.9 through 15.62SP Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers versions 3.16S through 3.18.1S Description A vulnerability in...
International Components for Unicode Heap Buffer Overflow DoS
The vulnerability of the resolveImplicitLevels function in the implementation of the Unicode Bidirectional Algorithm of the International Components for Unicode library is related to errors in number processing. Exploiting this vulnerability can allow a malicious actor to cause service failures o...
Firefox Data Compromise
The vulnerability exists in the NSS Network Security Services library of Mozilla for Mozilla Firefox, due to incorrect processing of ASN.1 values in X.509 certificates. Exploiting this vulnerability allows malicious actors to replace RSA signatures with specially crafted certificates. This...
PT-2016-3294
Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description The issue is related to an incomplete fix, allowing guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory. This is due to not enabling memory and I/...
OpenJDK: Inet6Address class IPv6 address processing errors (Libraries, 8015743)
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Libraries...
Apache HTTP Server mod_log_config Denial of Service (CVE-2014-0098)
A denial of service vulnerability has been reported in Apache HTTP server. The vulnerability is due to a log processing error in the modlogconfig module. A remote, unauthenticated attacker can leverage this vulnerability by sending a malicious request to the target server...
GLSA-201206-16 : TagLib: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201206-16 TagLib: Multiple vulnerabilities Multiple vulnerabilities have been found in TagLib: The 'analyzeCurrent' function in ape/apeproperties.cpp contains a division by zero error CVE-2012-1107. The 'parse' function in...
MetaServer RT Multiple Remote Denial of Service Vulnerabilities
The host is running MetaServer RT and is prone to multiple remote denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmetaserverrtmultipledosvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ MetaServer RT Multiple Remote Denial of Service Vulnerabilities Authors: Sooraj KS...
Gentoo Security Advisory GLSA 200909-02 (libvorbis)
The remote host is missing updates announced in advisory GLSA 200909-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200909-02 (libvorbis)
The remote host is missing updates announced in advisory GLSA 200909-02. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...
Wireshark Multiple Unspecified Vulnerability - Apr09 (Windows)
This host is installed with Wireshark and is prone to multiple unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulnapr09win.nasl 4906 2017-01-02 13:06:55Z teissa $ Wireshark Multiple Unspecified Vulnerability - Apr09 Windows Authors: Sharath S Copyright: Copyright c 2009...
CVE-2008-4544
Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error."...
Code injection
Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error."...
CVE-2008-4544: Undefined Security Weakness
Unspecified vulnerability in an unspecified Microsoft API, as used by Cisco Unity and possibly other products, allows remote attackers to cause a denial of service by sending crafted packets to dynamic UDP ports, related to a "processing error."...
Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA Advisory ID: cisco-sa-20080903-asa Revision 1.0 For Public Release 2008 September 3 1600 UTC GMT...