KLA11130 Denial of service vulnerability in Google Chrome

An unspecified vulnerability in the V8 component that allows the stack-based buffer to overflow stack buffer overflow. This vulnerability can be exploited remotely by an unauthenticated attacker to execute arbitrary code and to cause denial of service; Technical details NB: This vulnerability doe...

Elastic Kibana X-Pack 'CVE-2017-8445' TLS Trust Manager Bypass Vulnerability - Linux

Elastic Kibana with X-Pack is prone to a TLS Trust Manager bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Elastic Kibana X-Pack 'CVE-2017-8446' Impersonation Vulnerability - Windows

Elastic Kibana with X-Pack is prone to an impersonation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

KLA11124 Multiple vulnerabilities in Oracle Virtual Box

Multiple serious vulnerabilities have been found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions and obtain sensitive information. Original advisories Oracle Critical Patch Update Advisory Related products...

PT-2017-3501

Name of the Vulnerable Software and Affected Versions Cobbler versions up to 2.8.2 Description The issue is related to the lack of data sanitization in the add repo component of the Cobbler network installation server, which can be exploited by a remote attacker to execute arbitrary code with roo...

PRTG Network Monitor Multiple Vulnerabilities

PRTG Network Monitor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apache HTTP Server 'Whitespace Defects' Multiple Vulnerabilities

Apache HTTP Server is prone to multiple vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Rancher Server Security Bypass Vulnerability

Rancher Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:rancher:rancher";...

DiskBoss Enterprise Server 8.x <= 8.3.12 Buffer Overflow Vulnerability - Windows

DiskBoss Enterprise is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

RHEL 6 : kernel (RHSA-2017:2796)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2796 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: A flaw was found in the way the Linux kernel...

Ubuntu: Security Advisory (USN-3426-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Backdoor access issue in Wi-Fi STATION L-02F

Overview Wi-Fi STATION L-02F provided by NTT DOCOMO, INC. contains a backdoor access issue. Japan Computer Emergency Response Team Coordination Center Global Coordination Division Cyber Metrics Line Information Security Analyst Keisuke Shikano reported this vulnerability to IPA. JPCERT/CC...

KLA11103 Multiple arbitrary code execution vulnerabilities in Adobe Flash Player

Multiple serious memory corruption vulnerabilities have been found in Adobe Flash Player versions earlier than 27.0.0.130. Malicious users can exploit these vulnerabilities to execute arbitrary code. NB: These vulnerabilities does not have any public CVSS ratings, so overall rating can be changed...

PT-2017-12897

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the BGP parser, specifically in the decode rt routing info function within print-bgp.c. Recommendations For versions prior to 4.9.2, update to version...

Apache Struts Security Update (S2-026)

Apache Struts is prone to a security bypass vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

ClamAV <= 0.99.2 Multiple DoS Vulnerabilities - Linux

ClamAV is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:clamav:clamav"...

PT-2017-2784 · Supervisor +1 · Supervisor +1

Name of the Vulnerable Software and Affected Versions: Supervisor versions prior to 3.0.1 Supervisor versions 3.1.x prior to 3.1.4 Supervisor versions 3.2.x prior to 3.2.4 Supervisor versions 3.3.x prior to 3.3.3 Description: The XML-RPC server in Supervisor allows remote authenticated users to...

PT-2017-3922 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.6.37 and earlier Oracle MySQL versions 5.7.19 and earlier Description: The issue is related to an uncontrolled consumption of system resources in the MySQL Server component, specifically in the InnoDB subcomponent. Thi...

Jetty < 9.4.6.20170531 Security Bypass Vulnerability - Linux

Jetty is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:eclipse:jetty"; ifdescription...

Sendio Local File Inclusion Vulnerability

Sendio is affected by a Local File Inclusion vulnerability that allows an unauthenticated, remote attacker to read potentially sensitive system files via a specially crafted URL. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...