PT-2014-5122 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.16.2 Description: The issue is related to an array index error in the logi dj raw event function in drivers/hid/hid-logitech-dj.c. This error allows physically proximate attackers to execute arbitrary code or...

Apache OpenOffice < 4.1.1 Multiple Vulnerabilities

The version of Apache OpenOffice installed on the remote host is a version prior to 4.1.1. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw allows remote attackers to execute arbitrary commands via a specially crafted Calc spreadsheet. CVE-2014-3524 - A flaw in...

Apple Safari Multiple Memory Corruption Vulnerabilities-01 (Aug 2014) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

PT-2014-1975 · D Link · Dnr-326

Name of the Vulnerable Software and Affected Versions: D-Link DNR-326 versions prior to 2.10 build 03 Description: The issue is related to the check login function and is caused by weaknesses in the authentication procedure. It allows a remote attacker to bypass authentication and log in by...

Cross-Site Request Forgery (CSRF)

Overview faye is a simple pub/sub messaging for the web. Affected versions of this package are vulnerable to Cross-Site Request Forgery CSRF. Rosetta Flash alphanum only swf converter can be used as a callback at a JSONP endpoint, and as a result, send data across domains. Remediation Upgrade fay...

xmonad-contrib: Arbitrary code execution

Background xmonad-contrib is a set of third party tiling algorithms, configurations, and scripts for xmonad. Description A vulnerability in the Xmonad.Hooks.DynamicLog module could allow a malicious website with a specially crafted title to inject commands into the title bar which would be execut...

Adobe Reader Multiple Vulnerabilities (Feb 2008) - Windows

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Tomcat full system security vulnerabilities, please fix as soon as possible-vulnerability warning-the black bar safety net

The Apache Tomcat team today the announcement that Tomcat 6. x, 7. x, 8. x the three branches are found security vulnerabilities, including two critical vulnerabilities, users are advised to fix ASAP. ! 1. DoS vulnerability The Apache Tomcat development team to fix a DoS vulnerability, but did no...

PT-2014-1186 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.35 and earlier Oracle MySQL versions 5.6.15 and earlier Description: The issue allows remote authenticated users to affect availability via vectors related to XML in the MySQL Server component. Recommendations: For...

TYPO3 feuser_adminLib Authorization Bypass Vulnerability

TYPO3 is prone to an authorization bypass vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:typo3:typo3";...

PT-2013-1028 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 3.12.5 Description: The issue allows local users to gain privileges via a large id value, specifically through an array index error in the kvm vm ioctl create vcpu function in the KVM subsystem. This can be...

PT-2013-3511 · Nagios · Nagios Core

Name of the Vulnerable Software and Affected Versions: Nagios Core versions 3.4.4, 3.5.1, and earlier Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary nagioscfg file with a predictable name in /tmp/. Recommendations: For Nagios Core versio...

Mozilla Thunderbird Multiple Vulnerabilities - August12 (Mac OS X)

This host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdmultvulnaug12macosx.nasl 6074 2017-05-05 09:03:14Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities - August12 Mac OS X Authors: Arun Kallavi Copyrigh...

Mozilla Firefox ESR Multiple Vulnerabilities - August12 (Windows)

This host is installed with Mozilla Firefox ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxesrmultvulnaug12win.nasl 6079 2017-05-08 09:03:33Z teissa $ Mozilla Firefox ESR Multiple Vulnerabilities - August12 Windows Authors: Arun Kallavi Copyright:...

Comodo Internet Security Denial of Service Vulnerability-01

The host is installed with Comodo Internet Security and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbcomododosvuln01win.nasl 6115 2017-05-12 09:03:25Z teissa $ Comodo Internet Security Denial of Service Vulnerability-01 Authors: Arun Kallavi Copyright: Copyright ...

Comodo Internet Security Unspecified Vulnerability

Comodo Internet Security is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Comodo Internet Security Denial of Service Vulnerability-04

The host is installed with Comodo Internet Security and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbcomododosvuln04win.nasl 6074 2017-05-05 09:03:14Z teissa $ Comodo Internet Security Denial of Service Vulnerability-04 Authors: Arun Kallavi Copyright: Copyright ...

Mozilla Thunderbird ESR Multiple Vulnerabilities - June 13 (Mac OS X)

This host is installed with Mozilla Thunderbird ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmozillathunderbirdesrmultvulnjun13macosx.nasl 6104 2017-05-11 09:03:48Z teissa $ Mozilla Thunderbird ESR Multiple Vulnerabilities - June 13 Mac OS X Authors: Arun...

VMware vCenter Server Multiple Vulnerabilities (VMSA-2012-0005)

The version of VMware vCenter Server installed on the remote host is 4.0 before Update 4a, 4.1 before Update 3, or 5.0 before Update 1. As such it is potentially affected by multiple vulnerabilities in the embedded Apache Tomcat server and the Oracle Sun Java Runtime Environment. C Tenable Networ...

Wireshark Multiple Vulnerabilities (Jun 2013) - Mac OS X

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...