38 matches found
The vulnerability of the Local Web Classification Server Service (LWCS) in the anti-virus software Apex One allows a hacker to elevate their privileges or execute arbitrary code.
The vulnerability of the Local Web Classification Server Service LWCS in the anti-virus software Apex One is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow a hacker to enhance their privileges or execute arbitrary code...
RHEL 9 : java-1.8.0-openjdk (RHSA-2022:2137)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:2137 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...
RHEL 9 : java-17-openjdk (RHSA-2022:1729)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1729 advisory. The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixe...
OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...
OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...
CentOS 7 : java-11-openjdk (RHSA-2022:1440)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1440 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affecte...
OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...
RHEL 8 : java-1.8.0-openjdk (RHSA-2022:1490)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1490 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...
RHEL 8 : java-11-openjdk (RHSA-2022:1441)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1441 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...
OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008)
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2. Easily exploitable...
RHEL 8 : java-11-openjdk (RHSA-2022:1443)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1443 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...
The vulnerability of the Cyrus IMAP mail server, related to the use of cryptographic algorithms containing defects, allows attackers to cause service failures.
The vulnerability of the Cyrus IMAP mail server lies in the ability to select a table element for data storage. Exploiting this vulnerability allows an attacker operating remotely to cause a service failure...
defective.site Cross Site Scripting vulnerability OBB-1287484
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of the FortiSIEM security management system, related to the use of cryptographic algorithms containing defects, allows attackers to gain unauthorized access to protected information.
The vulnerability of the FortiSIEM security management system is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
CVE-2016-6804
The Apache OpenOffice installer versions prior to 4.1.3, including some branded as OpenOffice.org for Windows contains a defective operation that allows execution of arbitrary code with elevated privileges. This requires that the location in which the installer is run has been previously poisoned...
ACLU Asks FTC to Investigate Carriers on Android Security
The next shoe has fallen in an effort to force wireless carriers and handset makers to provide regular security updates to Android mobile devices. The American Civil Liberties Union filed a complaint this week with the U.S. Federal Trade Commission accusing four leading carriers of deceptive...
Keepass PM v1.22 - Filter & Validation Bypass Vulnerability
Document Title: =============== Keepass PM v1.22 - Filter & Validation Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/632.wmv View: http://www.youtube.com/watch?v=uFjxHa-8TZ0 Article: http://www.vulnerability-lab.com/getcontent.php?id=632...
Accounts easily compromised on Critical Path web mail service, CP does not respond after 30 days.
Security Advisory: Cross-site scripting vulnerability compromises accounts on Altavista, ICQ, US West/Qwest, others Date 21 August 2000 Author Jeffrey W. Baker, email [email protected] Copyright statement This security advisory is Copyright 2000 by Jeffrey William Baker [email protected]. The advisor...