11763 matches found
Apache Jetspeed Multiple Vulnerabilities (Mar 2016)
Apache Jetspeed is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:jetspeed"; if...
The vulnerability of Nettle’s cryptographic library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ecc256modp function in the Nettle cryptographic library is related to errors in cryptographic transformations. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure
The vulnerability of the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted package...
The vulnerability of the HP System Management Homepage software allows a hacker to execute arbitrary code.
The vulnerability of the HP System Management Homepage software lies in code errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the HP System Management Homepage software allows a perpetrator to obtain confidential information or alter data.
The vulnerability of the HP System Management Homepage software relates to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or alter data...
The vulnerability of the Ruby on Rails software platform, which allows attackers to bypass the authentication process
The vulnerability of the httpbasicauthenticatewith method in the ActionController/lib/actioncontroller/metal/httpauthentication.rb implementation of Basic Authentication in the Ruby on Rails software framework is related to security configuration errors. Exploiting this vulnerability allows a...
The vulnerability of the HP System Management Homepage software allows a perpetrator to obtain confidential information or alter data.
The vulnerability of the HP System Management Homepage software relates to errors in the code. Exploiting this vulnerability can allow a local attacker to obtain confidential information or alter data...
The vulnerability of Asterisk IP-telephony management systems and Certified Asterisk, which allows a perpetrator to trigger a service failure.
The vulnerability of Asterisk IP-telephony systems and Certified Asterisk is related to errors in pointer assignment. Exploiting this vulnerability can allow a malicious actor to cause service failures pointer assignment of an uninitialized pointer and emergency termination of operations...
ATutor 2.2.1 - Directory Traversal / Remote Code Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'ATutor 2.2.1 Directory Traversal / Remote Code Execution', 'Description' = %q This module exploits a directory traversal...
Grandstream Wave Redirection Vulnerability
Grandstream Wave is a suite of free VoIP applications. Grandstream Wave uses an insecure connection to obtain a configuration file, which allows an attacker to impersonate a configuration server with invalid, mismatched, or expired certificates, redirect phone calls, or cause dialed calls to...
Debian DSA-3520-1 : icedove - security update
Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail client: Multiple memory safety errors, integer overflows, buffer overflows and other implementation errors may lead to the execution of arbitrary code or denial of service. %NASLMINLEVEL 70300 C...
DSA-3522-1 squid3 - security update
Bulletin has no description...
[SECURITY] [DSA 3520-1] icedove security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3520-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2016 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3520-1 (icedove - security update)
Multiple security issues have been found in Icedove, Debian OpenVAS Vulnerability Test $Id: deb3520.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3520-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2016 Greenbone Networks GmbH...
DSA-3520-1 icedove - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3520-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Vulnerabilities in the Google Chrome browser that allow a perpetrator to exert other effects or cause service failures
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...
Vulnerabilities in Google Chrome browser and the V8 browser kernel, which allow attackers to exert other effects or cause service failures
The multiple vulnerabilities of Google Chrome and the browser kernel V8 are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service failures or other adverse effects...
CVE-2016-1645
Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...
CVE-2016-1645
Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...