SUSE-SU-2017:3276-1 Security update for intel-SINIT

This update for intel-SINIT fixes the following issues: Security issue fixed: - CVE-2011-5174: Fixed security issue in old SINIT files which allowed local users to bypass the TXT protection mechanism bsc1069754...

Apache ActiveMQ 'CVE-2011-4905' Denial of Service Vulnerability - Windows

Apache ActiveMQ is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:activemq";...

UBUNTU-CVE-2015-0226

Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this...

CSRF Protection Bypass in Ruby on Rails

Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via forged 1 AJAX or 2 API requests that...

CVE-2011-2683

reseed seeds random numbers from an insecure HTTP request to random.org during installation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a man-in-the-middle attack...

CVE-2011-2683

reseed seeds random numbers from an insecure HTTP request to random.org during installation, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a man-in-the-middle attack...

CVE-2011-2684

foo2zjs before 20110722dfsg-3ubuntu1 as packaged in Ubuntu, 20110722dfsg-1 as packaged in Debian unstable, and 20090908dfsg-5.1+squeeze0 as packaged in Debian squeeze create temporary files insecurely, which allows local users to write over arbitrary files via a symlink attack on /tmp/foo2zjs...

CVE-2011-4333

LabWiki 1.1 and earlier contains cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. The issue is triggered via the (1) from parameter to index.php and (2) page_no parameter to recentchanges.php. The linked sources (NVD/NVD mirrors and CN...

CVE-2011-4334

The vulnerability CVE-2011-4334 affects LabWiki 1.1 and earlier: edit.php does not properly validate uploaded user files, allowing remote authenticated users to upload arbitrary PHP files by submitting a PHP file with a .gif extension in the userfile parameter. This is due to inadequate upload va...

CVE-2011-2683

The CVE-2011-2683 entry describes reseeding the random number generator from an insecure HTTP request to random.org during installation, enabling a man-in-the-middle attack to compromise cryptographic protections. The connected documents confirm the basic flaw and its impact but do not provide sp...

CVE-2011-2684

The CVE-2011-2684 entry concerns the foo2zjs printer driver. Affects foo2zjs packages in Ubuntu (before 20110722dfsg-3ubuntu1), Debian unstable (before 20110722dfsg-1), and Debian squeeze (before 20090908dfsg-5.1+squeeze0). The root cause is insecure temporary file creation, allowing a local atta...

CVE-2011-2684

foo2zjs before 20110722dfsg-3ubuntu1 as packaged in Ubuntu, 20110722dfsg-1 as packaged in Debian unstable, and 20090908dfsg-5.1+squeeze0 as packaged in Debian squeeze create temporary files insecurely, which allows local users to write over arbitrary files via a symlink attack on /tmp/foo2zjs...

CVE-2011-1935

pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafted packets...

CVE-2011-1935

Details from multiple sources confirm CVE-2011-1935 affects libpcap's pcap-linux.c codepath for libpcap 1.1.1 prior to commit ea9432fabdf4b33cbc76d9437200e028f1c47c93. When snaplen is set, the frame size calculation may truncate packets, potentially allowing a remote attacker who can send crafted...

BELL-CVE-2011-5320 CVE-2011-5320 does not affect BellSoft software

Bulletin has no description...

CVE-2011-5320

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

CVE-2011-5320

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

CVE-2011-5320

CVE-2011-5320 affects the GNU C Library (glibc) where scanf and related input functions are vulnerable in versions prior to 2.15. A crafted large string of 0s can trigger a local denial of service (segmentation fault). The impact is limited to local attackers with access to the system and is not ...

CVE-2011-5320

scanf and related functions in glibc before 2.15 allow local users to cause a denial of service segmentation fault via a large string of 0s...

CVE-2011-4667

Cisco reports a vulnerability in the encryption library used by Cisco IOS Software (15.2(1)T, 15.2(1)T1, 15.2(2)T), Cisco NX-OS on MDS 9222i, MDS 9000 modules, and Cisco IOS in VPN Services Port Adaptor for Catalyst 6500 (12.2(33)SXI/SXJ); affected sessions protected by IPsec could leak part of t...