Debian: Security Advisory (DLA-1112-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Red Hat keycloak-httpd-client-install information disclosure vulnerability

Red Hat keycloak is a suite of software from Red Hat that provides authentication and management capabilities for modern applications and services. keycloak-httpd-client-install is an executable installer. A security vulnerability exists in Red Hat keycloak-httpd-client-install that stems from th...

The installer of "FLET'S VIRUS CLEAR Easy Setup & Application Tool" and "FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool" may insecurely load Dynamic Link Libraries

Overview The installer of "FLET'S VIRUS CLEAR Easy Setup & Application Tool" and "FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool" provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Librarie...

Oracle Siebel CRM Siebel Engineering - Unspecified Vulnerability in Installer and Deployment Component

Oracle Siebel CRM is a set of customer relationship management solutions from Oracle USA, which includes modules for sales management, marketing management, customer service system, call center, etc. Siebel Engineering - Installer and Deployment is one of the Siebel Engineering Installer and...

JVN#26255241: The installer of "FLET'S VIRUS CLEAR Easy Setup & Application Tool" and "FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool" may insecurely load Dynamic Link Libraries

The installer of "FLET'S VIRUS CLEAR Easy Setup & Application Tool" and "FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool" provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Impact...

Yandex Browser installer for Desktop DLL Hijacking Vulnerability

Yandex Browser is a free Chromium-based web browser developed by Russian web search company Yandex that uses the Blink typography engine and runs on Windows, OS X, Android and iOS. A DLL hijacking vulnerability exists in the Yandex Browser installer for desktop versions prior to 17.4.1. The...

CVE-2017-7327

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll...

CVE-2017-7327

Yandex Browser installer for Desktop before 17.4.1 has a DLL Hijacking Vulnerability because an untrusted search path is used for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll or profapi.dll...

CVE-2017-7327

Vulnerability summary (CVE-2017-7327) : Yandex Browser installer for Desktop prior to 17.4.1 is affected by a DLL hijacking issue caused by untrusted search paths for dnsapi.dll, winmm.dll, ntmarta.dll, cryptbase.dll, or profapi.dll. The issue can allow loading of arbitrary DLLs and crashing the ...

Oracle Java SE Multiple Vulnerabilities (January 2018 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 9 Update 4, 8 Update 161, 7 Update 171, or 6 Update 1888888881. It is, therefore, affected by multiple vulnerabilities related to the following components : - AWT - Deployment - Hotspot - I18n...

Oracle Java SE Multiple Vulnerabilities (January 2018 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 9 Update 4, 8 Update 161, 7 Update 171, or 6 Update 181. It is, therefore, affected by multiple vulnerabilities related to the following components : - AWT - Deployment - Hotspot - I18n -...

JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Installer)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Installer. Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Java SE executes to compromise Java SE...

CVE-2018-2627

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Installer. Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Java SE executes to compromise Java SE...

CVE-2018-2632

Vulnerability in the Siebel Engineering - Installer and Deployment component of Oracle Siebel CRM subcomponent: Siebel Approval Manager. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2018-2632

Vulnerability in the Siebel Engineering - Installer and Deployment component of Oracle Siebel CRM subcomponent: Siebel Approval Manager. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

CVE-2018-2569

Vulnerability in the Java ME SDK component of Oracle Java Micro Edition subcomponent: Installer. The supported version that is affected is 8.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java ME SDK executes to compromise Java ME SDK...

Code injection

Vulnerability in the Siebel Engineering - Installer and Deployment component of Oracle Siebel CRM subcomponent: Siebel Approval Manager. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

Code injection

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Installer. Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Java SE executes to compromise Java SE...

CVE-2018-2627

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Installer. Supported versions that are affected are Java SE: 8u152 and 9.0.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Java SE executes to compromise Java SE...

CVE-2018-2569

Vulnerability in the Java ME SDK component of Oracle Java Micro Edition subcomponent: Installer. The supported version that is affected is 8.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java ME SDK executes to compromise Java ME SDK...