718 matches found
CVE-2015-0386
Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener, a different vulnerability than CVE-2013-0338, CVE-2013-2877, and CVE-2014-0191...
McAfee ePolicy Orchestrator Information Disclosure Vulnerability (CNVD-2015-00419)
McAfee ePolicy Orchestrator is a set of scalable security management software from the U.S. company McAfee McAfee. An information disclosure vulnerability exists in McAfee ePolicy Orchestrator versions prior to 4.6.9, and 5.x versions prior to 5.1.2, which allows an attacker to obtain the...
foreman: app/controllers/api/v1/hosts_controller.rb API privilege escalation
app/controllers/api/v1/hostscontroller.rb in Foreman before 1.2.2 does not properly restrict access to hosts, which allows remote attackers to access arbitrary hosts via an API request...
kernel: xen: hypercalls exposed to privilege rings 1 and 2 of HVM guests
Xen 3.0.3 through 4.1.x possibly 4.1.6.1, 4.2.x possibly 4.2.3, and 4.3.x possibly 4.3.1 does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a crafted application running in ring 1 or 2...
UBUNTU-CVE-2014-1268
WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than CVE-2014-1269 and CVE-2014-1270...
ipa: weakness when initiating join from IPA client can potentially compromise IPA domain
The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority CA certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate...
DEBIAN-CVE-2012-2921
Universal Feed Parser aka feedparser or python-feedparser before 5.1.2 allows remote attackers to cause a denial of service memory consumption via a crafted XML ENTITY declaration in a non-ASCII encoded document...
acroread: multiple unspecified flaws (APSB12-08, APSB12-01)
Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-4370 and CVE-2011-4373...
dhcp: NULL pointer dereference crash via crafted DHCPv6 packet
ISC DHCP server 4.0 before 4.0.2, 4.1 before 4.1.2, and 4.2 before 4.2.0-P1 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a DHCPv6 packet containing a Relay-Forward message without an address in the Relay-Forward link-address field...
BELL-CVE-2009-1243 CVE-2009-1243 does not affect BellSoft software
Bulletin has no description...
PT-2006-4418 · Invision · Invision Power Board
Name of the Vulnerable Software and Affected Versions: Invision Power Board versions 1.x through 2.x Description: Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via various parameters in different actions in index.php and coins list.php. The...
2026-04 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5091575)
2026-04 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems KB5091575...
2021-11 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2 for x64 (KB5006364)
2021-11 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2 for x64 KB5006364...
2021-11 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2 for ARM64 (KB5006364)
2021-11 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2 for ARM64 KB5006364...
2022-02 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2 for x64 (KB5009470)
2022-02 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2 for x64 KB5009470...
2021-11 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2 for x64 (KB5007293)
2021-11 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2 for x64 KB5007293...
