CVE-2017-4946

The VMware V4H and V4PA desktop agents 6.x before 6.5.1 contain a privilege escalation vulnerability. Successful exploitation of this issue could result in a low privileged windows user escalating their privileges to SYSTEM. Recent assessments: ccondon-r7 at July 26, 2024 1:30pm UTC reported:...

Oracle WebLogic WSAT Remote Code Execution

The remote Oracle WebLogic server is affected by a remote code execution vulnerability in the WSAT endpoint due to unsafe deserialization of XML encoded Java objects. An unauthenticated, remote attacker can exploit this, via a crafted Java object, to execute arbitrary Java code in the context of...

Palo Alto Networks PAN-OS 7.1.x < 7.1.14 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 7.1.14. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid105298; scriptversion"1.8";...

Palo Alto Networks PAN-OS 8.0.x < 8.0.6 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 8.0.x prior to 8.0.6. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104811; scriptversion"1.11";...

Apache Tomcat HTTP PUT JSP File Upload RCE

The HTTP server running on the remote host is affected by a flaw that allows a remote unauthenticated attacker to upload a JSP file and execute it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid105006;...

Roundcube Webmail < 1.1.10, 1.2.x < 1.2.7, 1.3.x < 1.3.3 File Disclosure Vulnerability

Roundcube Webmail is prone to a file disclosure vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

Fedora 25 : 1:tomcat (2017-f499ee7b12)

This update includes a rebase from 8.0.46 up to 8.0.47 which resolves a single CVE along with various other bugs/features : rhbz1497682 CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615 Note that Tenable Network Security has extracted the preceding description block directly...

Fedora 26 : 1:tomcat (2017-ef7c118dbc)

This update includes a rebase from 8.0.46 up to 8.0.47 which resolves a single CVE along with various other bugs/features : rhbz1497682 CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615 Note that Tenable Network Security has extracted the preceding description block directly...

Juniper Junos Space < 17.1R1 Multiple Vulnerabilities (JSA10826)

According to its self-reported version number, the version of Junos Space running on the remote device is 17.1R1, and is therefore affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104100; scriptversion"1.7";...

Adobe Flash Player <= 27.0.0.159 Type Confusion Vulnerability (APSB17-32)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 27.0.0.159. It is, therefore, affected by an unspecified type confusion flaw that is caused by input not being properly validated. An unauthenticated, remote attacker can exploit this, by convincin...

Oracle Database Server 'WLM' And 'Spatial' Components Multiple Unspecified Vulnerabilities

Oracle Database Server is prone to multiple unspecified security vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Office Web Apps Server 2010 Service Pack 2 Remote Code Execution Vulnerability (KB4011194)

This host is missing an important security update according to Microsoft KB4011194 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft SharePoint Enterprise Server 2016 Remote Code Execution Vulnerability (KB4011217)

This host is missing an important security update according to Microsoft KB4011217 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Word 2010 Service Pack 2 Remote Code Execution Vulnerability (KB3213630)

This host is missing an important security update according to Microsoft KB3213630 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2012-4929

creationtimestamp| type| source ---|---|--- 2017-10-09 18:29:26+00:00| seen| https://t.me/informationsecuritychannel/9760 2017-10-17 20:54:29+00:00| seen| https://t.me/informationsecuritychannel/10087 2020-02-21 20:52:02+00:00| seen| https://t.me/cibsecurity/10017 2023-11-28 11:34:55+00:00| seen|...

Cisco IOS Software DHCP Remote Code Execution Vulnerability

According to its self-reported version, the IOS is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

Apache Tomcat 'HTTP PUT Request' JSP Upload Code Execution Vulnerability

Apache Tomcat is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat";...

Become A Certified Hacker – 5 Online Learning Courses for Beginners

Hacking is not a trivial process, but it does not take too long to learn. If you want to learn Ethical Hacking and Penetration testing, you are at right place. We frequently receive emails from our readers on learning how to hack, how to become an ethical hacker, how to break into computers, how ...

Microsoft .NET Framework Remote Code Execution Vulnerability (KB4040978)

This host is missing an important security update according to Microsoft KB4040978 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft .NET Framework Remote Code Execution Vulnerability (KB4040974)

This host is missing an important security update according to Microsoft KB4040974 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...