[SECURITY] [DSA 3557-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3557-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 26, 2016 https://www.debian.org/security/faq -...

CVE-2016-0644

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DDL...

CVE-2016-0644

CVE-2016-0644 is an unspecified local-vulnerability in Oracle MySQL/MariaDB affecting DDL paths that can impact availability. Public HOTFIXes exist: MariaDB 10.0.25 (per Debian DSA-3595-1) and MariaDB 5.5.50 (per CentOS CentOS-announce 2016:1602). IBM/PowerKVM advisories also reference this CVE w...

CVE-2016-0644

Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DDL...

MariaDB 5.5.0 < 5.5.48 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.48. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.48 advisory. - Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48...

CVE-2015-8100

The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file...

CVE-2015-0644

AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service device reload via a crafted TCP packet, aka Bug ID...

CVE-2015-0644

CVE-2015-0644 affects Cisco IOS XE AppNav. The vulnerability arises from improper handling of TCP packets, allowing an unauthenticated, remote attacker to cause either arbitrary code execution or a device reload (DoS) via a crafted TCP packet. Affected are IOS XE 3.8–3.10 before 3.10.3S, 3.11 bef...

KLA10510 Multiple vulnerabilities in Cisco IOS

An unspecified vulnerabilities were found in multiple versions of Cisco IOS. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packets or messages. Original advisories -...

Code injection

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive...

openSUSE Security Update : flash-player (openSUSE-SU-2013:0295-2)

Adobe Flash Player was updated to 11.2.202.270: bnc803485 - APSB13-05, CVE-2013-1372, CVE-2013-0645, CVE-2013-1373, CVE-2013-1369, CVE-2013-1370, CVE-2013-1366, CVE-2013-0649, CVE-2013-1365, CVE-2013-1374, CVE-2013-1368, CVE-2013-0642, CVE-2013-0644, CVE-2013-0647, CVE-2013-1367, CVE-2013-0639,...

EMC CTA v10.0 Unauthenticated XXE Arbitrary File Read

EMC CTA v10.0 is susceptible to an unauthenticated XXE attack that allows an attacker to read arbitrary files from the file system with the permissions of the root user. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...

openSUSE: Security Advisory for flash-player (openSUSE-SU-2013:0295-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8465)

This update for flash-player to version 11.2.202.270, tracked as ABSP13-05 , contains fixes for the following security issues : - Several buffer overflow vulnerabilities that could lead to code execution. CVE-2013-0642 / CVE-2013-0645 / CVE-2013-1365 / CVE-2013-1366 / CVE-2013-1367 / CVE-2013-136...

Flash Player <= 10.3.183.51 / 11.5.502.149 Multiple Vulnerabilities (APSB13-05)

Binary data 6688.prm...

Adobe Flash Player Multiple Vulnerabilities -02 Feb13 (Windows)

This host is installed with Adobe Flash Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvuln02feb13win.nasl 8178 2017-12-19 13:42:38Z cfischer $ Adobe Flash Player Multiple Vulnerabilities -02 Feb13 Windows Authors: Thanga Prakash S Copyright...

flash-plugin: multiple code execution flaws (APSB13-05)

Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 o...

CVE-2013-0644

CVE-2013-0644 details a use-after-free vulnerability in Adobe Flash Player and Adobe AIR that allows attackers to execute arbitrary code. Affected software includes Flash Player on Windows (before 10.3.183.63 and 11.x before 11.6.602.168), Mac OS X (before 10.3.183.61 and 11.x before 11.6.602.167...

CVE-2013-0644

Use-after-free vulnerability in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x before 11.6.602.167 on Mac OS X, before 10.3.183.61 and 11.x before 11.2.202.270 on Linux, before 11.1.111.43 on Android 2.x and 3.x, and before 11.1.115.47 o...

CVE-2012-0644

CVE-2012-0644 refers to a race condition in Apple iOS Passcode Lock (before 5.1) that lets a physically proximate attacker bypass the lock via a slide-to-dial gesture. Affected: iOS prior to 5.1 (Passcode Lock component). Root cause: race condition in handling slide-to-dial. Impact: bypass of pas...