Security fix for the ALT Linux 10 package clamav version 0.101.2-alt1

March 28, 2019 Sergey Y. Afonin 0.101.2-alt1 - 0.101.2 + CVE-2019-1787, CVE-2019-1789, CVE-2019-1788 - 0.101.1 and prior + CVE-2019-1786, CVE-2019-1785, CVE-2019-1798 - 0.101.1 and 0.101.0 only - switched to libpcre2...

CVE-2018-1786

CVE-2018-1786 affects IBM Spectrum Protect Client/API (dsmc/dsmcad) and related components where TCP/IP sockets accumulate in CLOSE_WAIT, causing TCP/IP resource leakage and potential DoS. The vulnerability impacts IBM Spectrum Protect Client/API 7.1.x (notably 7.1.8.0/7.1.8.3) and 8.1.x (notably...

Security Bulletin: Publish/Subscribe処理でメモリーリークを起こしてしまう脆弱性が IBM MQ と IBM MQ Appliance に見つかりました。(CVE-2017-1786)

Summary IBM MQ キュー・マネージャーがパブリッシュ/サブスクライブ・メッセージングを処理するとき、特定のアプリケーションのリクエストに対するレスポンスでメモリー・リークを起こし、その結果サービスが失敗する可能性が有ります。 Vulnerability Details 最新の情報については、下記URLの文書（英語）をご参照ください。 Security Bulletin: IBM MQ and IBM MQ Appliance are vulnerable to a memory leak in pubsub CVE-2017-1786 CVEID: CVE-2017-1786...

CVE-2017-1786

CVE-2017-1786 describes a memory-leak vulnerability in IBM MQ (WebSphere MQ) that under certain conditions could allow an authenticated user to exhaust resources and cause service loss. Affected products and versions include IBM MQ v8 (maintenance 8.0.0.0–8.0.0.8) and IBM MQ v9 LT S (9.0.0.0–9.0....

CVE-2015-1786

Cross-site request forgery CSRF vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or malformed token identifiers...

CVE-2015-1786

Cross-site request forgery CSRF vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or malformed token identifiers...

CVE-2015-1786

CVE-2015-1786 : A CSRF vulnerability in Zend Framework 2.3.x (Zend/Validator/Csrf) before 2.3.6 arises from handling of token identifiers that can be null or malformed. This could allow an attacker to forge requests and perform unauthorized actions on behalf of a user. Affected software: Zend Fra...

IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Privilege Escalation Exploit

Exploit for linux platform in category local exploits !/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known...

AIX 5.3 / 6.1 / 7.1 / 7.2 lquerylv Local Root

!/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known functionality, and focusing on badly coded SUID binaries...

IBM AIX 5.3/6.1/7.1/7.2 - 'lquerylv' Local Privilege Escalation

!/usr/bin/sh AIX lquerylv 5.3, 6.1, 7.1, 7.2 local root exploit. Tested against latest patchset 7100-04 This exploit takes advantage of known issues with debugging functions within the AIX linker library. We are taking advantage of known functionality, and focusing on badly coded SUID binaries...

CVE-2016-1786

The CVE-2016-1786 issue affects WebKit Page Loading in Apple iOS prior to 9.3 and Safari prior to 9.1. It arises from improper handling of HTTP 3xx responses, allowing a remote attacker to spoof the displayed URL, bypass Same Origin Policy, and potentially read sensitive cached data via a crafted...

openSUSE Security Update : libwebkit (openSUSE-SU-2010:0666-1)

The browser engine libwebkit was updated to version 1.2.4 to fix several security bugs. CVE-2010-1781, CVE-2010-1782, CVE-2010-1784, CVE-2010-1785 CVE-2010-1786, CVE-2010-1787, CVE-2010-1788, CVE-2010-1790 CVE-2010-1792, CVE-2010-1793, CVE-2010-2648 %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2014-1786

CVE-2014-1786 is part of a family of Internet Explorer memory corruption vulnerabilities affecting IE 9–11. The connected sources describe the issue as remote code execution or a denial of service via a crafted web site, caused by memory corruption in the browser engine. The vulnerability is list...

Ubuntu Update for unity-firefox-extension USN-1786-2

Check for the Version of unity-firefox-extension OpenVAS Vulnerability Test $Id: gbubuntuUSN17862.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for unity-firefox-extension USN-1786-2 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.n...

Ubuntu: Security Advisory (USN-1786-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1786

CVE-2013-1786 is a Drupal-related XSS in the contributed Company Theme before 7.x-1.4. The vulnerability lies in the 3 slide gallery not properly sanitizing user-entered content, enabling remote authenticated users with the administer themes permission to inject arbitrary script/HTML via unspecif...

CVE-2013-1786

Cross-site scripting XSS vulnerability in the 3 slide gallery in the Company theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors...

SA-CONTRIB-2013-032 - Company theme - Cross Site Scripting (XSS)

This third-party contributed theme changes Drupal's interface. The theme doesn't properly sanitize user-entered content in the 3 slide gallery on the homepage leading to a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker would have to have the...

AIX 5.3 TL 7 : libc (IZ50517)

There is a race condition in the MALLOCDEBUG debugging component of the malloc subsystem in the library libc.a. A local user can exploit this race condition when executing setuid root programs and thereby overwrite any file in the system. The successful exploitation of this vulnerability allows a...

Scientific Linux Security Update : webkitgtk on SL6.x i386/x86_64

Multiple memory corruption flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application. CVE-2010-1782, CVE-2010-1783, CVE-2010-1784, CVE-2010-1785,...