MGASA-2015-0107 Updated libssh2 packages fix CVE-2015-1782

Updated libssh2 packages fix security vulnerability: Mariusz Ziulek reported that libssh2, a SSH2 client-side library, was reading and using the SSHMSGKEXINIT packet without doing sufficient range checks when negotiating a new SSH session with a remote server. A malicious attacker could man in th...

[SECURITY] [DSA 3182-1] libssh2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3182-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 11, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3182-1] libssh2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3182-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 11, 2015 http://www.debian.org/security/faq -...

SUSE-SU-2015:0676-1 Security update for libssh2_org

The ssh client library libssh2org was updated to fix a security issue: CVE-2015-1782: A malicious server could send a crafted SSHMSGKEXINIT packet, that could lead to a buffer overread and to a crash of the application using libssh2org. Security Issues: CVE-2015-1782...

openSUSE Security Update : gimp (openSUSE-SU-2011:0586-1)

This update fixes various overflows : + CVE-2011-1178: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P + CVE-2011-1782: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

openSUSE Security Update : libwebkit (openSUSE-SU-2010:0666-1)

The browser engine libwebkit was updated to version 1.2.4 to fix several security bugs. CVE-2010-1781, CVE-2010-1782, CVE-2010-1784, CVE-2010-1785 CVE-2010-1786, CVE-2010-1787, CVE-2010-1788, CVE-2010-1790 CVE-2010-1792, CVE-2010-1793, CVE-2010-2648 %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : gimp (openSUSE-SU-2011:0586-1)

This update fixes various overflows : + CVE-2011-1178: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P + CVE-2011-1782: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

CVE-2014-1782

Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1769, CVE-2014-1785, CVE-2014-2753, CVE-2014-275...

CVE-2014-1782

Microsoft Internet Explorer 11 is affected by CVE-2014-1782, described as a memory corruption vulnerability that can allow remote code execution or a denial of service via a crafted web site. The description notes this is a distinct vulnerability from CVE-2014-1769, CVE-2014-1785, CVE-2014-2753, ...

Ubuntu: Security Advisory (USN-1782-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : libxml2 vulnerability (USN-1782-1)

It was discovered that libxml2 incorrectly handled XML entity expansion. An attacker could use this flaw to cause libxml2 to consume large amounts of resources, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the...

CVE-2013-1782

Vulnerability overview: CVE-2013-1782 affects the Responsive Blog Theme for Drupal 7.x-1.x, prior to 7.x-1.6. The issue is an XSS vulnerability where user-entered content in the social icons is not properly sanitized, allowing remote authenticated users with the administer themes permission to in...

SA-CONTRIB-2013-028 - Responsive Blog Theme - Cross Site Scripting (XSS)

Responsive Blog Theme is a light weight Drupal 7 theme with a modern look and feel. The theme doesn't properly sanitize user-entered content in the social icon leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker would have to have the...

Scientific Linux Security Update : webkitgtk on SL6.x i386/x86_64

Multiple memory corruption flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application. CVE-2010-1782, CVE-2010-1783, CVE-2010-1784, CVE-2010-1785,...

CVE-2012-1782

CVE-2012-1782 concerns OSQA 3b, specifically the questions/ask path, where multiple cross-site scripting (XSS) vulnerabilities exist. The available connected documents confirm that remote attackers can inject arbitrary web script or HTML via the (1) URL bar or (2) picture bar. The root cause is d...

Debian Security Advisory DSA 2426-1 (gimp)

The remote host is missing an update to gimp announced via advisory DSA 2426-1. OpenVAS Vulnerability Test $Id: deb24261.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2426-1 gimp Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2426-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2426-1] gimp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2426-1 [email protected] http://www.debian.org/security/ Florian Weimer March 06, 2012 http://www.debian.org/security/faq -...

CVE-2012-1782

creationtimestamp| type| source ---|---|--- 2012-02-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36886...

Fedora Update for gimp FEDORA-2011-10788

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...