nessus

SUSE SLED12 / SLES12 Security Update : sqlite3 (SUSE-SU-2021:3215-1)

The remote SUSE Linux SLED12 / SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3215-1 advisory. SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent...

7.5 CVSS

2021-09-24T00:00:00

oracle

CPU July 2018

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories...

10.0 CVSS

2018-07-17T00:00:00

oracle

CPU July 2018

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories...

10.0 CVSS

2018-07-17T00:00:00

mageia

Updated ntp packages fix security vulnerabilities

This release addresses five security issues in ntpd for Mageia 6: LOW/MEDIUM: Sec 3012 / CVE-2016-1549 / VU#961909: Sybil vulnerability: ephemeral association attack While fixed in ntp-4.2.8p7, there are significant additional protections for this issue in 4.2.8p11. Reported by Matt Van Gundy of...

7.5 CVSS

2018-04-06T22:54:47

slackware

[slackware-security] ntp

New ntp packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/ntp-4.2.8p11-i586-1_slack14.2.txz: Upgraded. This release addresses five security issues in ntpd: * LOW/MEDIUM: Sec 3012...

5.0 CVSS

2018-03-01T23:49:07

nessus

FreeBSD : ntp -- multiple vulnerabilities (af485ef4-1c58-11e8-8477-d05099c0ae8c)

Network Time Foundation reports : The NTP Project at Network Time Foundation is releasing ntp-4.2.8p11. This release addresses five security issues in ntpd : LOW/MEDIUM: Sec 3012 / CVE-2016-1549 / VU#961909: Sybil vulnerability: ephemeral association attack INFO/MEDIUM: Sec 3412 /...

7.5 CVSS

2018-02-28T00:00:00

freebsd

ntp -- multiple vulnerabilities

Network Time Foundation reports: The NTP Project at Network Time Foundation is releasing ntp-4.2.8p11. This release addresses five security issues in ntpd: LOW/MEDIUM: Sec 3012 / CVE-2016-1549 / VU#961909: Sybil vulnerability: ephemeral association attack INFO/MEDIUM: Sec 3412 /...

7.5 CVSS

2018-02-27T00:00:00

impervablog

Deserialization Attacks Surge Motivated by Illegal Crypto-mining

Imperva’s research group is constantly monitoring new web application vulnerabilities. In doing so, we’ve noticed at least four major insecure deserialization vulnerabilities that were published in the past year. Our analysis shows that, in the past three months, the number of deserialization...

10.0 CVSS

2018-01-24T17:45:08

apple

About the security content of iTunes 12.6 for Windows - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, see...

7.8 CVSS

2017-12-11T11:38:44

nessus

Apple iTunes < 12.6 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes running on the remote host is prior to 12.6. It is, therefore, affected by multiple vulnerabilities : Multiple vulnerabilities exist in the expat component, the most severe of which are remote code execution vulnerabilities. An unauthenticated, remote attacker...

7.5 CVSS

2017-05-08T00:00:00

nessus

Apple iTunes < 12.6 Multiple Vulnerabilities (macOS) (credentialed check)

The version of Apple iTunes installed on the remote macOS or Mac OS X host is prior to 12.6. It is, therefore, affected by multiple vulnerabilities : Multiple vulnerabilities exist in the expat component, the most severe of which are remote code execution vulnerabilities. An...

7.5 CVSS

2017-05-08T00:00:00

nessus

Apple iTunes < 12.6 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.6. It is, therefore, affected by multiple vulnerabilities : Multiple vulnerabilities exist in the expat component, the most severe of which are remote code execution vulnerabilities. An unauthenticated,...

7.5 CVSS

2017-05-08T00:00:00

openvas

Apple iTunes Multiple Vulnerabilities-HT207598 (MAC OS X)

This host is installed with Apple iTunes and is prone to multiple vulnerabilities. ############################################################################### OpenVAS Vulnerability Test Apple iTunes Multiple Vulnerabilities-HT207598 (MACOSX) Authors: Antu Sanadi santu@secpod.com ...

7.8 CVSS

2017-03-30T00:00:00

openvas

Apple iTunes Multiple Vulnerabilities-HT207599 (Windows)

This host is installed with Apple iTunes and is prone to multiple vulnerabilities. ############################################################################### OpenVAS Vulnerability Test Apple iTunes Multiple Vulnerabilities-HT207599 (Windows) Authors: Antu Sanadi santu@secpod.com ...

7.8 CVSS

2017-03-30T00:00:00

apple

About the security content of iTunes 12.6 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, see...

7.8 CVSS

2017-03-22T07:40:40

apple

About the security content of iTunes 12.6 for Windows

About the security content of iTunes 12.6 for Windows This document describes the security content of iTunes 12.6 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

7.8 CVSS

2017-03-21T00:00:00

apple

About the security content of iTunes 12.6

About the security content of iTunes 12.6 This document describes the security content of iTunes 12.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available....

7.8 CVSS

2017-03-21T00:00:00

openvas

Zimbra Collaboration < 8.7.0 Multiple Vulnerabilities

Zimbra Collaboration is prone to multiple security vulnerabilities because it fails to sanitize user-supplied input. ############################################################################### OpenVAS Vulnerability Test $Id: gb_zimbra_zcs_870.nasl 11977 2018-10-19 07:28:56Z mmartin $ Zimbra...

7.5 CVSS

2017-02-01T00:00:00

cve

CVE-2016-3415

Zimbra Collaboration before 8.7.0 allows remote attackers to conduct deserialization attacks via unspecified vectors, aka bug...

6.4 CVSS

2017-01-18T22:59:00

nessus

Oracle E-Business Multiple Vulnerabilities (January 2017 CPU)

The version of Oracle E-Business installed on the remote host is missing the January 2017 Oracle Critical Patch Update (CPU). It is, therefore, affected by multiple unspecified vulnerabilities in multiple components and subcomponents, the most severe of which can allow an unauthenticated, remote...

6.8 CVSS

2017-01-18T00:00:00