52 matches found
Flash Player < 11.2.202.635 / 18.0.0.375 / 23.0.0.162 Multiple Vulnerabilities (APSB16-29)
Binary data 9603.prm...
CVE-2016-6261
The idnatoascii4i function in lib/idna.c in libidn before 1.33 allows context-dependent attackers to cause a denial of service out-of-bounds read and crash via 64 bytes of input...
Google Chrome < 52.0.2743.116 Multiple Vulnerabilities
Binary data 9490.pasl...
Mozilla Firefox ESR < 45.3 Multiple Vulnerabilities
Binary data 9485.prm...
cURL < 7.48.0 Integer Overflow Issue
Binary data 800142.prm...
Oracle Java SE < 7 Update 25 Arbitrary Code Execution
Binary data 9350.prm...
CVE-2016-2099
Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML document...
Oracle E-Business Multiple Vulnerabilities (April 2016 CPU)
The version of Oracle E-Business installed on the remote host is missing the April 2016 Oracle Critical Patch Update CPU. It is, therefore, affected by vulnerabilities in the following components : - An unspecified flaw exists in the DB Privileges subcomponent of the Oracle Applications Object...
Google Chrome < 49.0.2623.108 Multiple Vulnerabilities
Binary data 9204.pasl...
Adobe AIR < 20.0.0.260 Multiple Vulnerabilities (APSB16-04)
Binary data 9154.prm...
Microsoft Windows Excel Viewer Remote Code Execution Vulnerability (3124585)
This host is missing a critical security update according to Microsoft Bulletin MS16-004. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2015-7499
Heap-based buffer overflow in the xmlGROW function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers to obtain sensitive process memory information via unspecified vectors...
Google Chrome < 46.0.2490.71 Multiple Vulnerabilities
Binary data 9016.pasl...
GLSA-201406-11 : libXfont: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201406-11 libXfont: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libXfont. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker could use a specially...
Sitecore CMS <= 7.0 XSS Vulnerability
Sitecore CMS is prone to a cross-site scripting XSS vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
file: Denial of service
Background The file utility attempts to identify a file’s format by scanning binary data for patterns. Description Multiple issues with the ELF parser used by the file utility have been detected and fixed. Impact A context-dependent attacker can cause Denial of Service. Workaround There is no kno...
libpng: User-assisted execution of arbitrary code
Background libpng is a standard library used to process PNG Portable Network Graphics images. It is used by several programs, including web browsers and potentially server processes. Description Two vulnerabilities have been discovered in libpng: The pnguserversioncheck function contains an...
libvirt: Denial of service
Background libvirt is a C toolkit for manipulating virtual machines. Description Multiple vulnerabilities have been discovered in libvirt. Please review the CVE identifiers referenced below for details. Impact A context-dependent attacker may be able to cause Denial of Service. Workaround There i...
CVE-2014-5461
Buffer overflow in the vararg functions in ldo.c in Lua 5.1 through 5.2.x before 5.2.3 allows context-dependent attackers to cause a denial of service crash via a small number of arguments to a function with a large number of fixed arguments...