11912 matches found
OpenJDK: DnsClient fails to release request information after error (JNDI, 8075378)
It was discovered that the JNDI component in OpenJDK did not handle DNS resolution errors correctly. An attacker able to trigger such DNS errors could cause a Java application using JNDI to consume memory and CPU time, and possibly block further DNS resolution...
[SECURITY] [DSA 3333-1] iceweasel security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3333-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 12, 2015 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3333-1 (iceweasel - security update)
Multiple security issues have been found in Iceweasel, Debian OpenVAS Vulnerability Test $Id: deb3333.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3333-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2015 Greenbone Networks Gm...
PHP 5.5.x < 5.5.28 Multiple Vulnerabilities
According to its banner, the version of PHP running on the remote web server is 5.5.x prior to 5.5.28. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist in splarray.c, splobserver.c, and spldllist.c due to improper sanitization of input to the...
Adobe AIR <= 18.0.0.180 Multiple Vulnerabilities (APSB15-19)
According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 18.0.0.180. It is, therefore, affected by multiple vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...
Adobe Flash Player <= 18.0.0.209 Multiple Vulnerabilities (APSB15-19)
The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 18.0.0.209. It is, therefore, affected by the following vulnerabilities : - Multiple type confusion errors exist that allow an attacker to execute arbitrary code. CVE-2015-5554, CVE-2015-5555,...
The vulnerability of the Moodle learning management system allows a hacker to trigger a service failure.
The vulnerability of the filter/urltolink/filter.php sub-component of the Moodle learning management system is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending requests containing specially crafted regular...
The vulnerability of the Flash Player software allows attackers to carry out attacks related to memory cell addressing errors.
The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to perform attacks involving memory cell address errors...
The vulnerability of the Adobe AIR software platform allows attackers to carry out attacks related to memory cell addressing errors.
The vulnerability of the Adobe AIR software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to perform attacks related to memory cell address corruption remotely...
The vulnerability of Cisco Adaptive Security Appliance’s network firewall, which allows a hacker to trigger a service failure.
The vulnerability of the SNMP network firewall implementation of Cisco Adaptive Security Appliance is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending numerous SNMP requests remotely...
The vulnerability of Cisco Adaptive Security Appliance’s network firewall, which allows a hacker to trigger a service failure.
The vulnerability of Cisco Adaptive Security Appliance’s network interface layer is related to resource management errors. Exploiting this vulnerability can allow attackers to cause service interruptions by sending specially crafted OSPFv2 packets...
Debian DSA-3324-1 : icedove - security update (Logjam)
Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail client: multiple memory safety errors, use-after-frees and other implementation errors may lead to the execution of arbitrary code or denial of service. This update also addresses a vulnerability...
Debian Security Advisory DSA 3324-1 (icedove - security update)
Multiple security issues have been found in Icedove, Debian OpenVAS Vulnerability Test $Id: deb3324.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3324-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2015 Greenbone Networks GmbH...
DSA-3324-1 icedove - security update
Bulletin has no description...
The vulnerability of the Firefox browser, which allows a hacker to influence the operation of the program
The vulnerability in the nsZipArchive.cpp component, which allows access to arbitrary memory cells of the Firefox browser, is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to influence the operation of the program using a specially crafted ZIP archive...
The vulnerability of the Firefox ESR browser, which allows a hacker to execute arbitrary code
The vulnerability of the PDF.js module for the Firefox ESR browser is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, by circumventing current access restrictions...
Vulnerabilities in the Google Chrome browser that allow a hacker to trigger a service failure
The multiple vulnerabilities of the Google Chrome browser are related to code errors. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions remotely...
OracleVM 3.3 : bind (OVMSA-2015-0105)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2015-5477 - Fix CVE-2015-4620 - Resolves: 1215687 - DNS resolution failure in high load environment with SERVFAIL and 'out of memory/success' in the log - Fix CVE-2015-1349 - Enable RPZ-NSIP a...
The vulnerability of the Flash Player software platform, which allows a violator to trigger a service failure
The vulnerability of the Flash Player software is related to errors in pointer assignment. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the Flash Player software platform, which allows a violator to trigger a service failure
The vulnerability of the Flash Player software is related to errors in pointer assignment. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...