Lucene search
+L

1806 matches found

Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.40 views

Amazon Linux AMI : postgresql8 (ALAS-2012-94)

A flaw was found in the way the crypt password hashing function from the optional PostgreSQL pgcrypto contrib module performed password transformation when used with the DES algorithm. If the password string to be hashed contained the 0x80 byte value, the remainder of the string was ignored when...

4.3CVSS7.7AI score0.05734EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.41 views

Amazon Linux AMI : kernel (ALAS-2012-133)

An integer overflow flaw was found in the i915gemdoexecbuffer function in the Intel i915 driver in the Linux kernel. A local, unprivileged user could use this flaw to cause a denial of service. This issue only affected 32-bit systems. CVE-2012-2384 , Moderate A memory leak flaw was found in the w...

7.1CVSS6.7AI score0.0285EPSS
SaveExploits5References6
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.25 views

Amazon Linux AMI : perl-FCGI (ALAS-2011-05)

The MITRE CVE database describes CVE-2011-2766 as : The FCGI aka Fast CGI module 0.70 through 0.73 for Perl, as used by CGI::Fast, uses environment variable values from one request during processing of a later request, which allows remote attackers to bypass authentication via crafted HTTP header...

7.5CVSS5.4AI score0.07238EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.53 views

Amazon Linux AMI : mysql55 (ALAS-2012-144)

A stack-based buffer overflow flaw was found in the user permission checking code in MySQL. An authenticated database user could use this flaw to crash the mysqld daemon or, potentially, execute arbitrary code with the privileges of the user running the mysqld daemon. CVE-2012-5611 C Tenable...

6.5CVSS7.8AI score0.23956EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.48 views

Amazon Linux AMI : freetype (ALAS-2012-66)

Multiple flaws were found in the way FreeType handled fonts in various formats. If a specially crafted font file was loaded by an application linked against FreeType, it could cause the application to crash. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

10CVSS5.3AI score0.05574EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.46 views

Amazon Linux AMI : php (ALAS-2012-95)

Integer overflow in the pharparsetarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted tar file that triggers a heap-based buffer overflow...

7.5CVSS8.8AI score0.42481EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.39 views

Amazon Linux AMI : dbus (ALAS-2012-128)

It was discovered that the D-Bus library honored environment settings even when running with elevated privileges. A local attacker could possibly use this flaw to escalate their privileges, by setting specific environment variables before running a setuid or setgid application linked against the...

6.9CVSS6.8AI score0.04477EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.25 views

Amazon Linux AMI : php54 (ALAS-2013-212)

A buffer overflow flaw was found in the way PHP parsed deeply nested XML documents. If a PHP application used the xmlparseintostruct function to parse untrusted XML content, an attacker able to supply specially crafted XML could use this flaw to crash the application or, possibly, execute arbitra...

6.8CVSS8.8AI score0.05186EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.24 views

Amazon Linux AMI : socat (ALAS-2013-202)

socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service file descriptor consumption via multiple request that are refused based on the 1 sourceport, 2 lowport, 3 range, or 4...

2.6CVSS6.2AI score0.02061EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.43 views

Amazon Linux AMI : java-1.6.0-openjdk (ALAS-2012-136) (ROBOT)

Multiple improper permission check issues were discovered in the Beans, Swing, and JMX components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. CVE-2012-5086 , CVE-2012-5084 , CVE-2012-5089 Multiple improper permission check issues...

10CVSS8.2AI score0.45113EPSS
SaveExploits1References10
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.50 views

Amazon Linux AMI : bind (ALAS-2013-158)

A flaw was found in the DNS64 implementation in BIND when using Response Policy Zones RPZ. If a remote attacker sent a specially crafted query to a named server that is using RPZ rewrite rules, named could exit unexpectedly with an assertion failure. Note that DNS64 support is not enabled by...

7.1CVSS7.1AI score0.12036EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.20 views

Amazon Linux AMI : nss (ALAS-2011-21)

It was found that the Malaysia-based Digicert Sdn. Bhd. subordinate Certificate Authority CA issued HTTPS certificates with weak keys. This update renders any HTTPS certificates signed by that CA as untrusted. This covers all uses of the certificates, including SSL, S/MIME, and code signing. Note...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.44 views

Amazon Linux AMI : postgresql8 (ALAS-2012-82)

The pgdump utility inserted object names literally into comments in the SQL script it produces. An unprivileged database user could create an object whose name includes a newline followed by a SQL command. This SQL command might then be executed by a privileged user during later restore of the...

6.8CVSS7.8AI score0.03625EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2013/09/04 12:00 a.m.36 views

Amazon Linux AMI : tomcat6 (ALAS-2013-196)

The 1 tomcat5, 2 tomcat6, and 3 tomcat7 init scripts, as used in the RPM distribution of Tomcat for JBoss Enterprise Web Server 1.0.2 and 2.0.0, and Red Hat Enterprise Linux 5 and 6, allow local users to change the ownership of arbitrary files via a symlink attack on a tomcat5-initd.log, b...

6.9CVSS7.5AI score0.00372EPSS
SaveExploits1References2
ThreatPost
ThreatPost
added 2013/04/05 3:47 p.m.18 views

AMI Firmware Source Code, Private Key Leaked

Source code and a private signing key for firmware manufactured by a popular PC hardware maker American Megatrends Inc. AMI have been found on an open FTP server hosted in Taiwan. Researcher Brandan Wilson found the company’s data hosted on an unnamed vendor’s FTP server. Among the vendor’s...

0.4AI score
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2013/03/06 6:39 p.m.37 views

Low: Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.3 security update

Updated Grid component packages that fix one security issue, multiple bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability...

4.3CVSS5.8AI score0.02267EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2013/03/06 6:37 p.m.34 views

Low: Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.3 security update

Updated Grid component packages that fix one security issue, multiple bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability...

4.3CVSS5.8AI score0.02267EPSS
SaveExploits0References106
Tenable Nessus
Tenable Nessus
added 2013/01/24 12:00 a.m.28 views

RHEL 6 : jboss-ec2-eap (RHSA-2012:1376)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2012:1376 advisory. jboss-ec2-eap provides JBoss Operations Network JBoss ON scripts for JBoss Enterprise Application Platform running on the Amazon Web Services AWS...

2.1CVSS5.5AI score0.00353EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2012/10/16 1:22 p.m.38 views

Low: Red Hat Security Advisory: jboss-ec2-eap security update

An updated jboss-ec2-eap package that fixes one security issue is now available for JBoss Enterprise Application Platform 5.1.2 for Red Hat Enterprise Linux 6 running on the Amazon Web Services AWS Elastic Compute Cloud EC2. The Red Hat Security Response Team has rated this update as having low...

2.1CVSS5.7AI score0.00353EPSS
SaveExploits0References2
Prion
Prion
added 2012/08/31 2:55 p.m.12 views

Design/Logic Flaw

Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 allows...

9CVSS7.6AI score0.03558EPSS
SaveExploits0References5Affected Software4
Rows per page
Query Builder