151 matches found
CVE-2015-1386
Directory traversal vulnerability in unshield 1.0-1...
CVE-2015-1386
Directory traversal vulnerability in unshield 1.0-1...
CVE-2015-1386
CVE-2015-1386 is a directory traversal vulnerability in the unshield library (unshield 1.0-1). The connected sources confirm the flaw resides in unshield and allows traversal to access files outside the intended directory, enabling leakage of potentially sensitive information. The CVSS data from ...
CVE-2017-1386
CVE-2017-1386 affects IBM API Connect 5.0.0.0 (and related product versions) where a user could bypass password policy and create non‑compliant passwords that might be intercepted and decrypted via man‑in‑the‑middle techniques. The IBM Security Bulletin details affected ranges: API Connect 5.0.0....
Updated unshield packages fix security vulnerability
unshield is vulnerable to directory traversal via "../" sequences CVE-2015-1386...
MGASA-2017-0107 Updated unshield packages fix security vulnerability
unshield is vulnerable to directory traversal via "../" sequences CVE-2015-1386...
CVE-2016-1386
CVE-2016-1386 affects Cisco APIC-EM (APIC-Enterprise Module) API in version 1.0(1). The API vulnerability allows remote attackers to spoof administrator notifications by sending crafted attribute-value pairs (Bug CSCux15521). Root cause: insufficient protection of API functions. Impact per source...
GLSA-201601-02 : WebKitGTK+: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201601-02 WebKitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE identifiers referenced below for details. Impact : A remote attack can use multiple vectors to execu...
Gentoo Security Advisory GLSA 201601-02
Gentoo Linux Local Security Checks GLSA 201601-02 SPDX-FileCopyrightText: 2016 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Oracle: Security Advisory (ELSA-2009-1335)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2012-1386)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle: Security Advisory (ELSA-2011-1386)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED12 / SLES12 Security Update : webkitgtk (SUSE-SU-2015:0688-1)
This update fixes the following security issues : - Fix SSL connection issues with some websites after the POODLE vulnerability fix. - Fix a crash when loading flash plugins. - Fix build on GNU Hurd - Fix build on OS X. - Fix documentation of webkitprintoperationgetpagesetup. - Security fixes:...
Fedora 21 : webkitgtk-2.4.8-1.fc21 / webkitgtk3-2.4.8-1.fc21 (2015-0500)
Fix SSL connection issues with some websites after the POODLE vulnerability fix. - Fix a crash when loading flash plugins. - Fix build on GNU Hurd - Fix build on OS X. - Fix documentation of webkitprintoperationgetpagesetup. - Security fixes: CVE-2014-1344, CVE-2014-1384, CVE-2014-1385,...
Adobe Shockwave Player <= 12.0.0.112 Multiple Vulnerabilities (APSB13-12) (Mac OS X)
The remote Mac OS X host contains a version of Adobe Shockwave Player that is equal to or prior than 12.0.0.112. It is, therefore, affected by the following vulnerabilities : - An unspecified buffer overflow exists. CVE-2013-1383 - Two unspecified memory corruption errors exist. CVE-2013-1384,...
APPLE-SA-2014-08-13-1 Safari 6.1.6 and Safari 7.0.6
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-08-13-1 Safari 6.1.6 and Safari 7.0.6 Safari 6.1.6 and Safari 7.0.6 are now available and address the following: WebKit Available for: OS X Lion v10.7.5, OS X Lion Server v10.7.5, OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.4 Impact...
CVE-2014-1386
WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367...
CVE-2014-1386
WebKit, as used in Apple Safari before 6.1.6 and 7.x before 7.0.6, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in HT6367...
CVE-2014-1386
CVE-2014-1386 affects WebKit used by Apple Safari, where WebKit in Safari before 6.1.6 and 7.x before 7.0.6 is vulnerable. The issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted website. The description and ...