CVE-2018-0643

Ubuntu14.04 ORCA Online Receipt Computer Advantage 4.8.0 panda-server 1:1.4.9+p41-u4jma1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

CVE-2018-0643

The CVE-2018-0643 entry concerns ORCA (Online Receipt Computer Advantage) for Ubuntu 14.04. Affects ORCA 4.8.0 (panda-server) and earlier. The root cause is an OS command injection vulnerability (CWE-78) that could allow an attacker with administrator rights to execute arbitrary OS commands on th...

JVN#37376131: Multiple vulnerabilities in ORCA(Online Receipt Computer Advantage)

ORCAOnline Receipt Computer Advantage provided by ORCA Management Organization Co., Ltd contains vulnerabilities listed below. OS command injectionCWE-78 - CVE-2018-0643 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L| Base Score: 4.1 CVSS v2|...

CVE-2017-0643

CVE-2017-0643 describes a remote denial-of-service vulnerability in Android’s Media framework (Mediaserver). The issue could be triggered by processing a specially crafted media file, leading to a device hang or reboot. Affected products/versions include Android 5.0.2, 5.1.1, 6.0/6.0.1, 7.0, and ...

Amazon Linux: Security Advisory (ALAS-2016-738)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MariaDB 5.5.0 < 5.5.49 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.49. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.49 advisory. - Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49...

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2016:1619-1)

mariadb was updated to version 10.0.25 to fix 25 security issues. These security issues were fixed : - CVE-2016-0505: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Options bsc980904. - CVE-2016-0546: Unspecified vulnerability...

Scientific Linux Security Update : mariadb on SL7.x x86_64 (20160811)

The following packages have been upgraded to a newer upstream version: mariadb 5.5.50. Security Fixes : CVE-2016-0640, CVE-2016-0641, CVE-2016-0643, CVE-2016-0644, CVE-2016-0646, CVE-2016-0647, CVE-2016-0648, CVE-2016-0649, CVE-2016-0650, CVE-2016-0666, CVE-2016-3452, CVE-2016-3477, CVE-2016-3521...

RedHat Update for mariadb RHSA-2016:1602-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: mariadb55-mariadb security update

An update for mariadb55-mariadb is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Fedora 23 : community-mysql (2016-7c48036d73)

Update to latest upstream release. Also fixes CVE-2016-0705, CVE-2016-0639, CVE-2016-2047, CVE-2016-0647, CVE-2016-0648, CVE-2016-0666, CVE-2016-0642, CVE-2016-0655, CVE-2016-0643 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update syst...

Fedora 22 : community-mysql (2016-1aaf308de4)

Update to latest upstream release. Also fixes CVE-2016-0705, CVE-2016-0639, CVE-2016-2047, CVE-2016-0647, CVE-2016-0648, CVE-2016-0666, CVE-2016-0642, CVE-2016-0655, CVE-2016-0643 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update syst...

openSUSE Security Update : mariadb (openSUSE-2016-761)

mariadb was updated to version 10.0.25 to fix 25 security issues. These security issues were fixed : - CVE-2016-0505: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Options bsc980904. - CVE-2016-0546: Unspecified vulnerability...

Security update for mariadb (important)

mariadb was updated to version 10.0.25 to fix 25 security issues. These security issues were fixed: - CVE-2016-0505: Unspecified vulnerability allowed remote authenticated users to affect availability via unknown vectors related to Options bsc980904. - CVE-2016-0546: Unspecified vulnerability...

MariaDB 10.0.0 < 10.0.25 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.0.25. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.25 advisory. - Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before...

Fedora Update for community-mysql FEDORA-2016-1aaf308de4

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3595-1 : mariadb-10.0 - security update

Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.25. Please see the MariaDB 10.0 Release Notes for further details : - https://mariadb.com/kb/en/mariadb/mariadb-10024-release- notes/ -...

[SECURITY] [DSA 3595-1] mariadb-10.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3595-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3595-1] mariadb-10.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3595-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2016 https://www.debian.org/security/faq -...

Amazon Linux AMI : mysql56 (ALAS-2016-701)

A double-free flaw was found in the way OpenSSL parsed certain malformed DSA Digital Signature Algorithm private keys. An attacker could create specially crafted DSA private keys that, when processed by an application compiled against OpenSSL, could cause the application to crash. CVE-2016-0705 T...