12213 matches found
CVE-2018-3167: Undefined Security Weakness
Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite subcomponent: User Monitoring. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated...
Tainted flags not always propogated in Array#pack and String#unpack
In Arraypack and Stringunpack with some formats, the tainted flags of the original data are not propagated to the returned string/array. Arraypack method converts the receiver’s contents into a string with specified format. If the receiver contains some tainted objects, the returned string also...
ruby -- multiple vulnerabilities
Ruby news: CVE-2018-16395: OpenSSL::X509::Name equality check does not work correctly An instance of OpenSSL::X509::Name contains entities such as CN, C and so on. Some two instances of OpenSSL::X509::Name are equal only when all entities are exactly equal. However, there is a bug that the equali...
Security Bulletin: Password disclosure via trace log vulnerability in IBM MQ Managed File Transfer (CVE-2017-1795)
Summary Trace files generated by IBM MQ Managed File Transfer commands display passwords in plain text. Vulnerability Details CVEID: CVE-2017-1795 DESCRIPTION: IBM MQ Managed File Transfer could allow a local user to obtain highly sensitive information via trace log files generated by its command...
Security Bulletin: Code execution vulnerability in WebSphere Application Server (CVE-2018-1567)
Summary There is a potential remote code execution vulnerability in WebSphere Application Server. Vulnerability Details CVEID: CVE-2018-1567 DESCRIPTION: IBM WebSphere Application Server could allow remote attackers to execute arbitrary Java code through the SOAP connector with a serialized objec...
Unspecified vulnerability in Intel NVMe and RSTe driver pack installers
Intel NVMe and RSTe are both products of Intel Corporation.Intel NVMe is an open logical device interface specification for accessing non-volatile storage media connected via the PCI Express PCIe bus.RSTe is an embedded rapid storage software.driver pack installers is one of the driver installers...
CVE-2018-12596
Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote attackers to call aspx pages via the "activateuser.aspx" page, even if a page is located under the /WorkArea/ path, which is forbidden normally available exclusively for local...
CVE-2018-12131
Permissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe before version 4.7.0.2083 may allow an authenticated user to potentially escalate privilege via local access...
CVE-2018-12131
Permissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe before version 4.7.0.2083 may allow an authenticated user to potentially escalate privilege via local access...
Microsoft Office: Block opening of pre-release versions of file formats new to PowerPoint 2013
This test checks the setting for policy OpenVAS Vulnerability Test $Id: officepptconverters.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Block Opening of Pre-Release Versions of File Formats New to PowerPoint Through the Compatibility Pack for Office and PowerPoint Converter Authors:...
CVE-2018-12131: Incorrect Permission Assignment for Critical Resource
Permissions in the driver pack installers for Intel NVMe before version 4.0.0.1007 and Intel RSTe before version 4.7.0.2083 may allow an authenticated user to potentially escalate privilege via local access...
Microsoft Office: Block opening of pre-release versions of file formats new to Excel 2013
This test checks the setting for policy OpenVAS Vulnerability Test $Id: officeexcelconverters.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Block opening of pre-release versions of file formats new to Excel 2013 through the Compatibility Pack for Office 2013 and Excel 2013 Converter...
PT-2018-3418
Name of the Vulnerable Software and Affected Versions: Intel NVMe versions prior to 4.0.0.1007 Intel RSTe versions prior to 4.7.0.2083 Description: The issue is related to errors in managing privileges in the driver pack installers for Intel NVMe and Intel RSTe. This may allow an authenticated us...
Microsoft PowerPoint 2010 Service Pack 2 Remote Code Execution Vulnerability (KB4092482)
This host is missing an important security update according to Microsoft KB4092482 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft PowerPoint 2013 Service Pack 1 Remote Code Execution Vulnerability (KB4092453)
This host is missing an important security update according to Microsoft KB4092453 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Office 2013 Service Pack 1 Multiple Vulnerabilities (KB4461445)
This host is missing an important security update according to Microsoft KB4461445 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Word 2010 Service Pack 2 Remote Code Execution Vulnerability (KB4092439)
This host is missing an important security update according to Microsoft KB4092439 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Office 2010 Service Pack 2 Multiple RCE Vulnerabilities (KB4092483)
This host is missing an important security update according to Microsoft KB4092483 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Office Compatibility Pack Multiple Vulnerabilities (KB4092444)
This host is missing an important security update according to Microsoft KB4092444 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
