33563 matches found
CVE-2014-9681
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
SUSE SLED12 / SLES12 Security Update : ruby2.1 (SUSE-SU-2017:1067-1)
This ruby2.1 update to version 2.1.9 fixes the following issues: Security issues fixed : - CVE-2016-2339: heap overflow vulnerability in the Fiddle::Function.new'initialize' bsc1018808 - CVE-2015-7551: Unsafe tainted string usage in Fiddle and DL bsc959495 - CVE-2015-3900: hostname validation doe...
CVE-2016-5761
Cross-site scripting XSS vulnerability in Novell GroupWise before 2014 R2 Service Pack 1 Hot Patch 1 allows remote attackers to inject arbitrary web script or HTML via a crafted email...
CVE-2016-4293
Multiple heap-based buffer overflows in the 1 CBookBase::SetDefTableStyle and 2 CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote attackers to execute arbitrary code via a crafted Hangul Hcell Document .cell file...
Heap overflow
Multiple heap-based buffer overflows in the 1 CBookBase::SetDefTableStyle and 2 CBookBase::SetDefPivotStyle functions in Hancom Office 2014 VP allow remote attackers to execute arbitrary code via a crafted Hangul Hcell Document .cell file...
CVE-2016-5761
CVE-2016-5761 is a cross-site scripting (XSS) vulnerability in Novell GroupWise prior to 2014 R2 Service Pack 1 Hot Patch 1. An attacker can inject arbitrary web script or HTML via a crafted email, potentially affecting users who view the message in GroupWise. Public sources (SEC Consult advisory...
CVE-2016-4293
The CVE-2016-4293 vulnerability affects Hancom Office 2014 VP. It occurs in Hangul Hcell documents when parsing 0x088e records in the Workbook stream: the 0x088e structure exposes table_style_length and pivot_style_length fields (at offsets 0x10 and 0x12) that are used to copy strings into the CB...
Medium: cacti
Issue Overview: PHP Object Injection Vulnerabilities CVE-2014-4000 Affected Packages: cacti Issue Correction: Run yum update cacti or yum update --advisory ALAS-2017-817 to update your system. New Packages: noarch: cacti-1.0.4-1.14.amzn1.noarch src: cacti-1.0.4-1.14.amzn1.src Additional...
CVE-2014-9907
coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file...
CVE-2014-9907
CVE-2014-9907 affects ImageMagick’s DDS coder (coders/dds.c). A crafted DDS file can be used by remote attackers to cause a denial of service. The provided documents describe the vulnerability and its DoS impact but do not specify a fixed version or patch; no remediation details are listed here. ...
Updated capabilities to upgrade Windows 8.1 and Windows 7
Updated capabilities to upgrade Windows 8.1 and Windows 7 About this update This update adds capabilities to some computers that lets users easily learn about Windows 10 or start an upgrade to Windows 10. Before you install this update, see the Prerequisites section. For more information about...
CVE-2014-3887
CVE-2014-3887 affects I-O DATA DEVICE RockDisk NAS devices. A cross-site scripting (XSS) vulnerability exists in firmware versions prior to 1.05e1-2.0.5 , allowing remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The issue traces to an incomplete fix for ...
CVE-2014-3887
Cross-site scripting XSS vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713...
CVE-2014-7920
mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921...
CVE-2014-7920
CVE-2014-7920 affects the Android mediaserver component. The entry describes a privilege-escalation flaw in mediaserver present on Android 2.2–5.x up to before 5.1, enabling attackers to gain privileges. The documents do not specify the exact root cause or exploit details, and no remediation/patc...
CVE-2014-2710
CVE-2014-2710 affects Oliver (formerly Webshare) up to version 1.3.1. The vulnerability is non-persistent XSS via PATH_INFO on the login endpoints (index.php and loginform-inc.php). Root cause: input handling/validation flaw on login pages leading to script/HTML injection. Impact per sources incl...
Security fix for the ALT Linux 7 package krb5 version 1.13.7-alt0.M70P.1
1.13.7-alt0.M70P.1 built April 13, 2017 Evgeny Sinelnikov in task 180726 March 24, 2017 Evgeny Sinelnikov - Update to supported security release Fixes: CVE-2014-5355, CVE-2015-2694, CVE-2015-2695, CVE-2015-2696, CVE-2015-2698, CVE-2015-2697, CVE-2015-8629, CVE-2015-8630, CVE-2015-8631,...
openSUSE Security Update : slrn (openSUSE-2017-459) (POODLE)
This update for slrn contains one security improvement : - CVE-2014-3566: Disable SSLv3 to prevent POODLE attack boo1031023 The version 1.0.3 also contains a number of display and message processing improvements. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...
