USN-4129-1 curl vulnerabilities

Thomas Vegas discovered that curl incorrectly handled memory when using Kerberos over FTP. A remote attacker could use this issue to crash curl, resulting in a denial of service. CVE-2019-5481 Thomas Vegas discovered that curl incorrectly handled memory during TFTP transfers. A remote attacker...

USN-3982-1 linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

Ke Sun, Henrique Kawakami, Kekai Hu, Rodrigo Branco, Giorgi Maisuradze, Dan Horea Lutas, Andrei Lutas, Volodymyr Pikhur, Stephan van Schaik, Alyssa Milburn, Sebastian Österlund, Pietro Frigo, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida, Moritz Lipp, Michael Schwarz, and Daniel Gruss discovered...

Information Disclosure

Vino is a Virtual Network Computing VNC server for GNOME. It allows remote users to connect to a running GNOME session using VNC. It was found that Vino transmitted all clipboard activity on the system running Vino to all clients connected to port 5900, even those who had not authenticated. A...

USN-3274-1 icu vulnerabilities

It was discovered that ICU incorrectly handled certain memory operations when processing data. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program...

Microsoft Office Word Viewer Multiple Vulnerabilities (3204068)

This host is missing a critical security update according to Microsoft Bulletin MS16-148. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

The vulnerability of the Mozilla SeaMonkey software package, which allows a malicious individual to execute arbitrary code or trigger a service denial.

The Mozilla SeaMonkey browser contains numerous vulnerabilities related to memory-related errors. Exploiting these vulnerabilities allows a malicious individual to execute arbitrary code through a specially created website, cause service failures, or trigger an emergency shutdown of the applicati...

USN-2959-1 openssl vulnerabilities

Huzaifa Sidhpurwala, Hanno Böck, and David Benjamin discovered that OpenSSL incorrectly handled memory when decoding ASN.1 structures. A remote attacker could use this issue to cause OpenSSL to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2016-2108 Juraj...

The vulnerabilities of the PDF editing program Foxit PhantomPDF and the PDF viewing program Foxit Reader allow a perpetrator to execute arbitrary code.

Multiple vulnerabilities exist in the Print method and the PDF editing application program Foxit PhantomPDF, as well as the PDF viewing program Foxit Reader. These vulnerabilities are related to the use of memory after it is freed. Exploiting these vulnerabilities could allow an attacker, operati...

Oracle: Security Advisory (ELSA-2014-1801)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

xorg-x11-server: out of bounds access due to not validating length or offset values in Render extension

Multiple out-of-bounds access flaws were found in the way the X.Org server calculated memory requirements for certain requests. A malicious, authenticated client could use either of these flaws to crash the X.Org server...

Important: Red Hat Security Advisory: libvirt security and bug fix update

Updated libvirt packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Adobe Flash Player Multiple Vulnerabilities -01 May 13 (Windows)

This host is installed with Adobe Flash Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvuln01may13win.nasl 8178 2017-12-19 13:42:38Z cfischer $ Adobe Flash Player Multiple Vulnerabilities -01 May 13 Windows Authors: Thanga Prakash S Copyrigh...

Adobe Patches Memory Flaws in Flash Player and Sandbox Vulnerability in ColdFusion

Adobe’s second set of security updates coinciding with Microsoft’s monthly patch releases were made available today. The two bulletins include patches for vulnerabilities in Adobe Flash Player and Adobe ColdFusion. The Flash vulnerabilities for Windows are rated most severe by Adobe and successfu...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : thunderbird vulnerabilities (USN-1611-1)

Henrik Skupin, Jesse Ruderman, Christian Holler, Soroush Dalili and others discovered several memory corruption flaws in Thunderbird. If a user were tricked into opening a malicious website and had JavaScript enabled, an attacker could exploit these to execute arbitrary JavaScript code within the...

Ubuntu Update for firefox USN-1600-1

Ubuntu Update for Linux kernel vulnerabilities USN-1600-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16001.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for firefox USN-1600-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

USN-1218-1: Linux kernel vulnerabilities

Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local attacker could exploit this to read portions of kernel stack memory, leading to a loss of privacy. CVE-2010-4076, CVE-2010-4077 Alex Shi and Eric Dumazet discovered that the network stack...

Kingston Recalls Drives with Memory Flaws

Kingston Technology has asked customers to return certain models of its DataTraveler secure flash drives for an update, following the discovery of a flaw in the memory sticks. Read the full article. ZDNet...

Cumulative Security Update for Internet Explorer (953838)

This host is missing critical security update according to Microsoft Bulletin MS08-045. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...