33564 matches found
IBM WebSphere Application Server Liberty Arbitrary Code Execution Vulnerability (Mar 2016)
IBM WebSphere Application Server Liberty is prone to an arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Ubuntu 14.04 LTS : Perl vulnerabilities (USN-2916-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2916-1 advisory. It was discovered that Perl incorrectly handled certain regular expressions with an invalid backreference. An attacker could use this issue to cause Perl...
IBM WebSphere Application Server Security Bypass Vulnerability (swg21681249)
IBM WebSphere Application Server is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
MGASA-2016-0084 Updated xdelta3 packages fix CVE-2014-9765
Updated xdelta3 package fixes security vulnerability: Stepan Golosunov discovered that xdelta3, a diff utility which works with binary files, is affected by a buffer overflow vulnerability within the maingetappheader function, which may lead to the execution of arbitrary code CVE-2014-9765...
Updated xdelta3 packages fix CVE-2014-9765
Updated xdelta3 package fixes security vulnerability: Stepan Golosunov discovered that xdelta3, a diff utility which works with binary files, is affected by a buffer overflow vulnerability within the maingetappheader function, which may lead to the execution of arbitrary code CVE-2014-9765...
glibc: unbound stack usage
CVE-2014-9761 unbound stack usage The nan, nanf and nanl functions no longer have unbounded stack usage depending on the length of the string passed as an argument to the functions...
openSUSE Security Update : xdelta3 (openSUSE-2016-240)
This update for xdelta3 fixes the following security issue : - CVE-2014-9765: Fixed buffer overflow in maingetappheader. boo965791 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE Security Update : xdelta3 (openSUSE-2016-248)
This update for xdelta3 fixes the following security issue : - CVE-2014-9765: Fixed buffer overflow in maingetappheader. boo965791 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
CVE-2014-0292
CVE-2014-0292 entry is rejected/not used per initial description.
DSA-3488-1 libssh - security update
Bulletin has no description...
Fedora Update for poco FEDORA-2016-4
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The use of the Linux kernel in Use-After-Free（UAF）vulnerability to mention the right-vulnerability warning-the black bar safety net
Last month broke the CVE-2 0 1 6-0 7 2 8 （local mention the right loopholes so everyone's attention once again focused on the linux kernel security. And CVE-2 0 1 5-3 6 3 6, The CVE-2 0 1 5-7 3 1 2, The CVE-2 0 1 4-2 8 5 1, CVE-2 0 1 6-0 7 2 8 is a Use-After-Free（UAF types of vulnerabilities. We...
[SECURITY] [DSA 3484-1] xdelta3 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3484-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 19, 2016 https://www.debian.org/security/faq -...
Apache Traffic Server 5.1.x < 5.1.1 Multiple Vulnerabilities (POODLE)
Binary data 9081.prm...
[SECURITY] [DLA 420-1] libmatroska security update
Package : libmatroska Version : 0.8.1-1.1+deb6u1 CVE ID : CVE-2014-9765 It was discovered that there was a invalid memory address issue in libmatroska, an extensible open standard audio/video container format. When reading a block group or a simple block that uses EBML lacing the frame sizes...
SUSE SLED12 / SLES12 Security Update : glibc (SUSE-SU-2016:0471-1)
This update for glibc fixes the following security issues : - CVE-2015-7547: A stack-based buffer overflow in getaddrinfo allowed remote attackers to cause a crash or execute arbitrary code via crafted and timed DNS responses bsc961721 - CVE-2015-8777: Insufficient checking of LDPOINTERGUARD...
openSUSE Security Update : glibc (openSUSE-2016-224)
This update for glibc fixes the following security issues : - CVE-2015-7547: A stack-based buffer overflow in getaddrinfo allowed remote attackers to cause a crash or execute arbitrary code via crafted and timed DNS responses bsc961721 - CVE-2015-8777: Insufficient checking of LDPOINTERGUARD...
F5 Networks BIG-IP : PHP vulnerability (K17127)
The GetCode function in gdgifin.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function...
Fortinet FortiOS 5.2.x < 5.2.3 Multiple XSS
The remote FortiGate device is running a version of FortiOS that is 5.2.x prior to 5.2.3. It is, therefore, affected by multiple cross-site scripting vulnerabilities : - Multiple cross-site scripting vulnerabilities exists due to improper validation of user-supplied input to the user group and vp...