Lucene search
+L

1272 matches found

Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.45 views

Amazon Linux AMI : mysql (ALAS-2012-44)

This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update Advisory page, listed in the References section. CVE-2011-2262 , CVE-2012-0075 , CVE-2012-0087 , CVE-2012-0101 , CVE-2012-0102 , CVE-2012-0112 ,...

5.5CVSS5.3AI score0.03041EPSS
SaveExploits0References18
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.237 views

Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2013-167)

An integer overflow flaw was found in the way the 2D component handled certain sample model instances. A specially crafted sample model instance could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine privileges. CVE-2013-0809 It was...

10CVSS8.9AI score0.86151EPSS
SaveExploits10References3
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.42 views

Amazon Linux AMI : openssl (ALAS-2012-85)

An integer underflow flaw, leading to a buffer over-read, was found in the way OpenSSL handled DTLS Datagram Transport Layer Security application data record lengths when using a block cipher in CBC cipher-block chaining mode. A malicious DTLS client or server could use this flaw to crash its DTL...

6.8CVSS8.2AI score0.28154EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.48 views

Amazon Linux AMI : httpd (ALAS-2013-193)

Cross-site scripting XSS flaws were found in the modproxybalancer module's manager web interface. If a remote attacker could trick a user, who was logged into the manager web interface, into visiting a specially crafted URL, it would lead to arbitrary web script execution in the context of the...

5.1CVSS8.3AI score0.24886EPSS
SaveExploits4References4
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.36 views

Amazon Linux AMI : nrpe (ALAS-2013-203)

Incomplete blacklist vulnerability in nrpc.c in Nagios Remote Plug-In Executor NRPE before 2.14 might allow remote attackers to execute arbitrary shell commands via '$' shell metacharacters, which are processed by bash. C Tenable Network Security, Inc. The descriptive text and package checks in...

7.5CVSS5.5AI score0.65724EPSS
SaveExploits9References2
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.18 views

Amazon Linux AMI : cacti (ALAS-2011-23)

The release notes for Cacti 0.8.7h indicate that two security vulnerabilities were fixed, though no corresponding CVE has been issued. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI Security Advisory ALAS-2011-23...

5.4AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.55 views

Amazon Linux AMI : glibc (ALAS-2012-109)

Multiple errors in glibc's formatted printing functionality could allow an attacker to bypass FORTIFYSOURCE protections and execute arbitrary code using a format string flaw in an application, even though these protections are expected to limit the impact of such flaws to an application abort. C...

6.8CVSS7AI score0.03163EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.42 views

Amazon Linux AMI : perl (ALAS-2013-177)

A heap overflow flaw was found in Perl. If a Perl application allowed user input to control the count argument of the string repeat operator, an attacker could cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application...

7.5CVSS8AI score0.63488EPSS
SaveExploits14References5
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.32 views

Amazon Linux AMI : kernel (ALAS-2012-118)

The rdsrecvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via a 1 recvfrom or 2 recvmsg system call on an RDS socket. C Tenable Network...

2.1CVSS6.6AI score0.00952EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.54 views

Amazon Linux AMI : libvorbis (ALAS-2012-47)

A heap-based buffer overflow flaw was found in the way the libvorbis library parsed Ogg Vorbis media files. If a specially crafted Ogg Vorbis media file was opened by an application using libvorbis, it could cause the application to crash or, possibly, execute arbitrary code with the privileges o...

10CVSS8.5AI score0.07936EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.54 views

Amazon Linux AMI : java-1.7.0-openjdk (ALAS-2013-183)

Multiple flaws were discovered in the font layout engine in the 2D component. An untrusted Java application or applet could possibly use these flaws to trigger Java Virtual Machine memory corruption. CVE-2013-1569 , CVE-2013-2383 , CVE-2013-2384 Multiple improper permission check issues were...

10CVSS7.7AI score0.87227EPSS
SaveExploits22References23
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.39 views

Amazon Linux AMI : ruby (ALAS-2012-139)

Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the nameerrmesgtostr API function, which marks the string as tainted, a different vulnerability than...

5CVSS8AI score0.02619EPSS
SaveExploits1References2
Rows per page
Query Builder