QNAP VioStor NVR QNAP NAS - Remote Code Execution

QNAP VioStor NVR QNAP NAS - Remote Code Execution source: https://www.securityfocus.com/bid/60354/info QNAP VioStor NVR and QNAP NAS are prone to a remote code-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code with elevated privileges in t...

QNAP VioStor NVR / QNAP NAS - Remote Code Execution

source: https://www.securityfocus.com/bid/60354/info QNAP VioStor NVR and QNAP NAS are prone to a remote code-execution vulnerability. Successfully exploiting this issue may allow an attacker to execute arbitrary code with elevated privileges in the context of the user running the affected...

Mozilla Releases Multiple Updates

The Mozilla Foundation has released updates for the following products to address multiple vulnerabilities. Firefox 21.0 Firefox ESR 17.0.6 Thunderbird 17.0.6 Thunderbird ESR 17.0.6 These vulnerabilities could allow an attacker to execute arbitrary code, cause a denial-of-service condition, obtai...

Samsung Kies < 2.5.0.12094_27_11 Multiple ActiveX Control Vulnerabilities

The version of Samsung Kies ActiveX controls installed on the remote host is affected by multiple vulnerabilities : - A vulnerability in GetDataTable method in 'DCAPARAGONGM.dll' is affected by a NULL pointer dereference that could be used to perform a denial of service of the program...

McAfee VirusScan Enterprise Local Privilege Escalation (SB10034)

The version of McAfee VirusScan Enterprise installed on the remote host is potentially affected by an unspecified local privilege escalation vulnerability. By exploiting this flaw, a local attacker could gain elevated privileges. C Tenable Network Security, Inc. include"compat.inc"; if descriptio...

AIX 6.1 TL 7 : bos.rte.security (U838721)

The remote host is missing AIX PTF U838721, which is related to the security of the package bos.rte.security. AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam function when customer extended LDAP user filtering is configured. A local...

AIX 7.1 : bos.rte.security (U852829)

The remote host is missing AIX PTF U852829, which is related to the security of the package bos.rte.security. AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam function when customer extended LDAP user filtering is configured. A local...

AIX 6.1 TL 5 : bos.rte.security (U849827)

The remote host is missing AIX PTF U849827, which is related to the security of the package bos.rte.security. AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam function when customer extended LDAP user filtering is configured. A local...

TeamSHATTER Security Advisory: SQL Injection in Oracle EM &#40;SCPLBL_COLLECTED parameters&#41; &#40;CVE-2013-0353&#41;

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory SQL Injection in Oracle Enterprise Manager SCPLBLCOLLECTED parameters February 20, 2013 Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 11.1.0.7, 11.2.0.2, 11.2.0.3 Remote exploitable: Yes...

Sun Java JDK/JRE 6 < Update 7 Multiple Vulnerabilities (Unix)

The version of Sun Java Runtime Environment JRE 6.0 installed on the remote host is affected by multiple security issues : - A vulnerability in the JRE could allow unauthorized access to certain URL resources or cause a denial of service condition while processing XML data. In order to successful...

Microsoft Windows 'Win32k.sys' CVE-2013-1275 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges and to read arbitrary amounts of kernel memory. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya...

Apple Releases iOS 6.1

Apple has released iOS 6.1 for the iPhone 3GS and later, iPod touch 4th generation and later, and iPad 2 and later to address multiple vulnerabilities. These vulnerabilities may allow an attacker to operate with elevated privileges or execute arbitrary code. US-CERT encourages users and...

AIX 6.1 TL 6 : ldapauth (IV19077)

AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam function when customer extended LDAP user filtering is configured. A local attacker could exploit this vulnerability to gain lateral or elevated privileges on the system. %NASLMINLEVEL...

AIX 6.1 TL 5 : ldapauth (IV19097)

AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam function when customer extended LDAP user filtering is configured. A local attacker could exploit this vulnerability to gain lateral or elevated privileges on the system. %NASLMINLEVEL...

AIX 7.1 TL 1 : ldapauth (IV18464)

AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam function when customer extended LDAP user filtering is configured. A local attacker could exploit this vulnerability to gain lateral or elevated privileges on the system. %NASLMINLEVEL...

AIX 6.1 TL 7 : ldapauth (IV18637)

AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam function when customer extended LDAP user filtering is configured. A local attacker could exploit this vulnerability to gain lateral or elevated privileges on the system. %NASLMINLEVEL...

AIX 7.1 TL 0 : ldapauth (IV19098)

AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam function when customer extended LDAP user filtering is configured. A local attacker could exploit this vulnerability to gain lateral or elevated privileges on the system. %NASLMINLEVEL...

AIX 5.3 TL 12 : ldapauth (IV18638)

AIX could allow a local attacker to gain elevated privileges on the system, caused by an error in the getpwnam function when customer extended LDAP user filtering is configured. A local attacker could exploit this vulnerability to gain lateral or elevated privileges on the system. %NASLMINLEVEL...

Cisco Unified IP Phones Local Kernel System Call Input Validation Vulnerability

Cisco Unified IP Phones 7900 Series versions 9.31SR1 and prior contain an arbitrary code execution vulnerability that could allow a local attacker to execute code or modify arbitrary memory with elevated privileges. This vulnerability is due to a failure to properly validate input passed to kerne...

Cisco Unified IP Phone Local Kernel System Call Input Validation Vulnerability

Cisco Unified IP Phones 7900 Series versions 9.31SR1 and prior contain an arbitrary code execution vulnerability that could allow a local attacker to execute code or modify arbitrary memory with elevated privileges. This vulnerability is due to a failure to properly validate input passed to kerne...