oracle

Oracle Critical Patch Update Advisory - July 2020

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches are usually cumulative, but each advisory describes only the security patches added since the previous Critical Patch Update Advisory. Thus, prior Critical Patch Update advisories should be...

10.0 CVSS

2020-07-14T00:00:00

oracle

Oracle Critical Patch Update Advisory - January 2020

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches are usually cumulative, but each advisory describes only the security patches added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories should be...

10.0 CVSS

2020-01-14T00:00:00

mskb

Description of the security update for Outlook 2007: February 13, 2018

None Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2018-0850 and CVE-2018-0852. ...

9.3 CVSS

2018-02-13T08:00:00

openvas

Fedora Update for qt5-qtwebengine FEDORA-2017-98bed96d12

The remote host is missing an update for the ############################################################################### OpenVAS Vulnerability Test $Id: gb_fedora_2017_98bed96d12_qt5-qtwebengine_fc24.nasl 14223 2019-03-15 13:49:35Z cfischer $ Fedora Update for qt5-qtwebengine...

10.0 CVSS

2017-07-24T00:00:00

nessus

Fedora 24 : qt5-qtwebengine (2017-98bed96d12)

This update updates QtWebEngine to a snapshot from the Qt 5.6 LTS (long-term support) branch. This is a snapshot of the QtWebEngine that will be included in the bugfix and security release Qt 5.6.3, but only the QtWebEngine component is included in this update. The update fixes the following...

10 CVSS

2017-07-24T00:00:00

fedora

[SECURITY] Fedora 24 Update: qt5-qtwebengine-5.6.3-0.1.20170712gitee719ad313e564.fc24

Qt5 - QtWebEngine...

10.0 CVSS

2017-07-23T21:52:43

nessus

Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Multiple Vulnerabilities (July 2017 CPU)

According to its self-reported version number, the Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) installation running on the remote web server is 8.3.x prior to 8.3.15.4, 8.4.x prior to 8.4.15.2, 15.x prior to 15.2.15.1, or 16.x prior to 16.2.9.0. It is, therefore, affected by...

7.5 CVSS

2017-07-21T00:00:00

openvas

Apache Traffic Server (ATS) Multiple Vulnerabilities

Apache Traffic Server is prone to multiple vulnerabilities. ############################################################################### OpenVAS Vulnerability Test $Id: gb_apache_ats_mult_vuln.nasl 12106 2018-10-26 06:33:36Z cfischer $ Apache Traffic Server (ATS) Multiple Vulnerabilities ...

7.8 CVSS

2017-04-25T00:00:00

ubuntucve

CVE-2016-5396

Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb...

7.8 CVSS

2017-04-17T00:00:00

nessus

Google Chrome < 56.0.2924.76 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 56.0.2924.76. It is, therefore, affected by the following vulnerabilities : A cross-site scripting (XSS) vulnerability exists in the Document::shutdown() function in dom/Document.cpp due to a failure to clear...

6.8 CVSS

2017-01-27T00:00:00

nessus

Google Chrome < 56.0.2924.76 Multiple Vulnerabilities (macOS)

The version of Google Chrome installed on the remote macOS or Mac OS X host is prior to 56.0.2924.76. It is, therefore, affected by the following vulnerabilities : A cross-site scripting (XSS) vulnerability exists in the Document::shutdown() function in dom/Document.cpp due to a failure...

6.8 CVSS

2017-01-27T00:00:00

nessus

Oracle Enterprise Manager Cloud Control Multiple Vulnerabilities (January 2017 CPU)

The version of Oracle Enterprise Manager Cloud Control installed on the remote host is affected by multiple vulnerabilities in the Enterprise Manager Base Platform component : A flaw exists in the Bouncy Castle Java library due to improper validation of a point within the elliptic curve....

7.5 CVSS

2017-01-25T00:00:00

cve

CVE-2016-5019

CoreResponseStateManager in Apache MyFaces Trinidad 1.0.0 through 1.0.13, 1.2.x before 1.2.15, 2.0.x before 2.0.2, and 2.1.x before 2.1.2 might allow attackers to conduct deserialization attacks via a crafted serialized view state...

7.5 CVSS

2016-10-03T18:59:00

zdt

Apache MyFaces Trinidad Information Disclosure Vulnerability

Apache MyFaces Trinidad versions 1.0.0 to 1.0.13, 1.2.1 to 1.2.14, 2.0.0 to 2.0.1, and 2.1.0 to 2.1.1 suffer from an information disclosure vulnerability. Clarification: The first line in this CVE [1] was a copy&paste error during message composition and is not part of the CVE. This line can make...

7.5 CVSS

2016-10-03T00:00:00

symantec

Apache MyFaces Trinidad CVE-2016-5019 Remote Code Execution Vulnerability

Description Apache MyFaces Trinidad is prone to a security vulnerability. Successfully exploiting this issue allows attackers to obtain sensitive information or execute arbitrary code in the context of the affected application. Apache MyFaces Trinidad 1.2.14-core , 1.0.13-core , 2.0.1-core and...

7.5 CVSS

2016-09-29T00:00:00

nessus

Oracle JDeveloper Multiple RCE (July 2016 CPU)

The version of Oracle JDeveloper installed on the remote host is missing a security patch. It is, therefore, affected by multiple remote code execution vulnerabilities : A remote code execution vulnerability exists in the Application Development Framework (ADF) Faces subcomponent that...

7.5 CVSS

2016-09-19T00:00:00

openvas

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. # VID f29fea8f-b19f-11dd-a55e-00163e000016 OpenVAS Vulnerability Test $ Description: Auto generated from VID f29fea8f-b19f-11dd-a55e-00163e000016 Authors: Thomas Reinke reinke@securityspace.com Copyright:...

10.0 CVSS

2008-11-19T00:00:00