Debian DLA-1316-1 : freeplane security update

Wojciech Regua discovered that Freeplane, a program for working with mind maps, was affected by a XML External Entity XXE vulnerability in its mindmap loader that could compromise a user's machine by opening a specially crafted mind map file. For Debian 7 'Wheezy', these problems have been fixed ...

CVE-2018-1316

CVE-2018-1316 concerns the Apache ODE process deployment web service, which was vulnerable to directory traversal via a forged deployment name. The root cause was using a path for the deployment name, allowing traversal with .. in a request parameter, leading to potential writes to unintended loc...

CVE-2018-1316

The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directory traversal, resulting in the potential writing of files under unwanted locations, the overwriting of existing files or their deletion. This issue was...

Virtuozzo Linux Errata and Bugfix Advisory 2017:1316

Upstream security update. Follow RHBA-2017-1316 for details...

openSUSE Security Update : otrs (openSUSE-2016-1316)

This update for otrs fixes the following security issues : - CVE-2016-9139: execution of JavaScript in OTRS context by opening malicious attachment OSA-2016-02, bsc1008017 In addition, OTRS was updated to 3.3.16, containing all upstream improvements and bug fixes. %NASLMINLEVEL 70300 C Tenable...

Cisco Video Communications Server Information Disclosure Vulnerability (cisco-sa-20160208-vcs)

Cisco Video Communications Server VCS, when utilized as part of a Jabber Guest deployment, contains an information disclosure vulnerability that could allow and unauthenticated, remote attacker to gain access to potentially sensitive information. SPDX-FileCopyrightText: 2016 Greenbone AG Some tex...

CVE-2016-1316

Cisco TelePresence Video Communication Server (VCS) versions X8.1–X8.7, when used with Jabber Guest, have an information-disclosure vulnerability that allows an unauthenticated, remote attacker to obtain sensitive call-statistics via a direct request to an unspecified URL. Root cause: improper pr...

Tembria Server Monitor 5.6.0 - Denial of Service

No description provided by source. !/usr/bin/python Exploit Title : Tembria Server Monitor 5.6.0 CVE-ID : CVE-2010-1316 Date : April 9, 2010 Author : Lincoln Software Link : http://www.tembria.com/ Version : 5.6.0 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : Remote DoS Greetz to :...

APPLE-SA-2014-04-22-1 Security Update 2014-002

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-04-22-1 Security Update 2014-002 Security Update 2014-002 is now available and addresses the following: CFNetwork HTTPProtocol Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.2...

CVE-2014-1316

CVE-2014-1316 affects Apple OS X up to 10.9.2, where Heimdal Kerberos (as used in OS X) is vulnerable. A remote attacker can trigger denial of service by sending crafted ASN.1 data in Kerberos 5, causing an abort and daemon exit. The Apple Security Update 2014-002 (Security Update 2014-002) conta...

CVE-2013-1316

CVE-2013-1316 corresponds to a Microsoft Publisher 2003 SP3 vulnerability where a crafted Publisher file triggers a negative value allocation due to improper validation of an array size, enabling remote code execution. The related entries describe multiple related weaknesses in Publisher (includi...

Microsoft Office Publisher Remote Code Execution Vulnerability (2830397)

This host is missing an important security update according to Microsoft Bulletin MS13-042. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS13-042: Vulnerabilities in Microsoft Publisher Could Allow Remote Code Execution (2830397)

The Publisher component of Microsoft Office installed on the remote host is affected by multiple vulnerabilities : - The application has a negative value allocation vulnerability. CVE-2013-1316 - The application has an integer overflow vulnerability. CVE-2013-1317 - The application has a corrupt...

Microsoft Publisher Negative Value Allocation CVE-2013-1316 Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...

Ubuntu: Security Advisory (USN-1316-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : t1lib vulnerability (USN-1316-1)

Jonathan Brossard discovered that t1lib did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause t1lib to crash or possibly execute arbitrary code with user privileges. Note that Tenable Network Security...

CVE-2011-1316

The Session Initiation Protocol SIP Proxy in the HTTP Transport component in IBM WebSphere Application Server WAS before 7.0.0.15 allows remote attackers to cause a denial of service worker thread exhaustion and UDP messaging outage by sending many UDP messages...

CVE-2011-1316

CVE-2011-1316 affects IBM WebSphere Application Server (WAS) SIP Proxy in the HTTP Transport, where sending a flood of UDP messages can exhaust worker threads and cause UDP messaging outage, leading to a DoS condition. Vulnerable: WAS versions before 7.0.0.15. Red Hat and OpenVAS entries corrobor...

CVE-2010-1316

Tembria Server Monitor

Tembria Server Monitor 5.6.0 - Denial of Service

Tembria Server Monitor 5.6.0 - Denial of Service !/usr/bin/python Exploit Title : Tembria Server Monitor 5.6.0 CVE-ID : CVE-2010-1316 Date : April 9, 2010 Author : Lincoln Software Link : http://www.tembria.com/ Version : 5.6.0 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : Remote D...