Google Chrome < 48.0.2564.82 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 48.0.2564.82. It is, therefore, affected by multiple vulnerabilities as referenced in the 201601stable-channel-update20 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 48.0.2564.82 allow attackers...

CVE-2016-1929

The CVE-2016-1929 vulnerability affects the SAP HANA XS engine and allows remote attackers to spoof log entries in trace files, causing denial of service (disk consumption and process crash) via a crafted HTTP request related to an unspecified debug function (SAP Security Note 2241978). No exploi...

[SECURITY] [DLA 394-1] passenger security update

Package : passenger Version : 2.2.11debian-2+deb6u1 CVE ID : CVE-2015-7519 agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof heade...

PT-2016-1140

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.82 Opera affected versions not specified Description The issue is related to errors in security settings, specifically in the CustomButton::AcceleratorPressed function. This function is located in the...

PT-2016-1139

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.82 Opera affected versions not specified Description The issue is related to the Omnibox implementation and is caused by errors in security settings. It allows remote attackers to spoof a document's...

CVE-2016-1494

The verify function in the RSA package for Python Python-RSA before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack...

CVE-2015-7519

agent/Core/Controller/SendRequest.cpp in Phusion Passenger before 4.0.60 and 5.0.x before 5.0.22, when used in Apache integration mode or in standalone mode without a filtering proxy, allows remote attackers to spoof headers passed to applications by using an underscore character instead of a -...

IBM Rational ClearQuest Information Disclosure Vulnerability

IBM Rational ClearQuest is a suite of Application Lifecycle Management ALM software from IBM, USA. The software provides defect tracking, process customization, and real-time reporting for applications to improve visibility and control of the development cycle. A security vulnerability exists in...

CVE-2015-4996

IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover credentials via unspecified vectors...

Design/Logic Flaw

IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover credentials via unspecified vectors...

CVE-2015-4996

IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover credentials via unspecified vectors...

PT-2016-3647

Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.1.x through 8.0.0.x before 8.0.0.17 IBM Rational ClearQuest versions 8.0.1.x before 8.0.1.10 Description The issue allows local users to spoof database servers and discover credentials via unspecified vectors...

CVE-2015-7282

ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port...

Design/Logic Flaw

ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting that number for the destination port...

CVE-2015-5987: Undefined Security Weakness

Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...

CVE-2015-7575

Mozilla Network Security Services NSS before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof...

webkit -- UI spoof

webkit reports: The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to spoof the UI by extending scrollbar painting into the parent frame...

CVE-2015-8262: Undefined Security Weakness

Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spoof responses by predicting this value...

PT-2016-3800

Name of the Vulnerable Software and Affected Versions Phusion Passenger versions prior to 4.0.60 Phusion Passenger versions 5.0.x prior to 5.0.22 Description The issue allows remote attackers to spoof headers passed to applications by using an underscore character instead of a - dash character in...

Mozilla Firefox Multiple Vulnerabilities (Dec 2015) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...