CVE-2014-4612

Cross-site scripting XSS vulnerability in the keywords manager keywordmgr.php in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4613

Cross-site request forgery CSRF vulnerability in the administration panel in Piwigo before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that add users via a pwg.users.add action in a request to ws.php...

CVE-2014-4612

Cross-site scripting XSS vulnerability in the keywords manager keywordmgr.php in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4612

The vulnerability CVE-2014-4612 affects Coppermine Photo Gallery, specifically the keywords manager (keywordmgr.php). It is exploitable via cross-site scripting (XSS) in versions before 1.5.27 and in 1.6.x before 1.6.01. The root cause is an XSS flaw that allows remote attackers to inject arbitra...

CVE-2014-4613

CVE-2014-4613 describes a cross-site request forgery in the Piwigo administration panel prior to 2.6.2. The issue allows remote attackers to hijack administrator sessions by crafting requests to ws.php with a pwg.users.add action to add new users. Affected software: Piwigo versions before 2.6.2. ...

CVE-2014-8130

The TIFFmalloc function in tifunix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service divide-by-zero error and application crash via a crafted TIFF image that is mishandled by the TIFFWriteScanline function in tifwrite.c, as demonstrated by...

CVE-2014-8130

CVE-2014-8130 affects LibTIFF 4.0.3 (tif_unix.c). The _TIFFmalloc function does not reject a zero size, enabling a crafted TIFF image to trigger a divide-by-zero in TIFFWriteScanline/tif_write.c and cause a remote denial of service (crash). Public documentation also shows broader libTIFF advisori...

CVE-2014-8129

CVE-2014-8129 affects LibTIFF 4.0.3, enabling remote users to trigger a denial of service (out-of-bounds write) via a crafted TIFF image. The issue is tied to a failure to verify BitsPerSample = 2 in tif_next.c and to the t2p_sample_lab_signed_to_unsigned path in tiff2pdf.c. Various advisories no...

Solaris 10 (sparc) : 150383-03

SunOS 5.10: wanboot patch. Date this patch was last updated by Sun : Jun/14/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 151355-01

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: CPU performance counters CPC drivers. Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability c...

Solaris 10 (x86) : 150401-11

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...

Solaris 10 (sparc) : 125136-75

JavaSE 6: update 75 patch equivalent to JDK 6u75. Date this patch was last updated by Sun : Apr/14/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; ...

Solaris 10 (x86) : 150313-06

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: iSCSI Data MoverIDM. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability...

Solaris 10 (sparc) : 118666-61

JavaSE 5.0: update 61 patch equivalent to JDK 5.0u61. Date this patch was last updated by Sun : Jan/14/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (x86) : 147674-08

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Java Web Console. The supported version that is affected is 10. Difficult to exploit vulnerability allows successful unauthenticated network attacks via HTTP. Successful attack of this vulnerability can...

Solaris 10 (sparc) : 150113-02

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: sockfs. Supported versions that are affected are 8, 9, 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorize...

Solaris 10 (x86) : 119758-31

SunOS 5.10x86: Samba patch. Date this patch was last updated by Sun : Feb/15/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SUSE SLES11 Security Update : augeas (SUSE-SU-2018:0653-1)

This update for augeas fixes the following issues: Security issues fixed : - CVE-2017-7555: Fix a memory corruption bug could have lead to arbitrary code execution by passing crafted strings that would be mis-handled by parsename bsc1054171. - CVE-2014-8119: Fix improper handling of escaped strin...

Solaris 10 (sparc) : 142824-24 (POODLE)

Indexing and Search Service 1u5-24.12700: core patch. Date this patch was last updated by Sun : Mar/24/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 10 (sparc) : 150400-11

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...