F5 Networks BIG-IP : PHP vulnerability (K17127)

The GetCode function in gdgifin.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted GIF image that is improperly handled by the gdImageCreateFromGif function...

Fortinet FortiOS 5.2.x < 5.2.3 Multiple XSS

The remote FortiGate device is running a version of FortiOS that is 5.2.x prior to 5.2.3. It is, therefore, affected by multiple cross-site scripting vulnerabilities : - Multiple cross-site scripting vulnerabilities exists due to improper validation of user-supplied input to the user group and vp...

SUSE: Security Advisory for glibc (SUSE-SU-2016:0473-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3480-1 : eglibc - security update

Several vulnerabilities have been fixed in the GNU C Library, eglibc. The CVE-2015-7547 vulnerability listed below is considered to have critical impact. - CVE-2014-8121 Robin Hack discovered that the nssfiles database did not correctly implement enumeration interleaved with name-based or ID-base...

[SECURITY] [DSA 3480-1] eglibc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3480-1 [email protected] https://www.debian.org/security/ Florian Weimer February 16, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3480-1] eglibc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3480-1 [email protected] https://www.debian.org/security/ Florian Weimer February 16, 2016 https://www.debian.org/security/faq -...

Microsoft AFD.SYS Dangling Pointer Privilege Escalation

Exploit Title: MS14-040 - AFD.SYS Dangling Pointer Date: 2016-02-05 Exploit Author: Rick Larabee Vendor Homepage: www.microsoft.com Version: Windows 7, 32 bit Tested on: Win7 x32 afd.sys - 6.1.7600.16385 ntdll.dll - 6.1.7600.16385 CVE : CVE-2014-1767 Category: Local Privilege Escalation Reference...

DLA-416-1 eglibc - security update

Bulletin has no description...

Debian Security Advisory DSA 3480-1 (eglibc - security update)

Several vulnerabilities have been fixed in the GNU C Library, eglibc. The CVE-2015-7547 vulnerability listed below is considered to have critical impact. CVE-2014-8121 Robin Hack discovered that the nssfiles database did not correctly implement enumeration interleaved with name-based or ID-based...

Microsoft Windows 7 (x86) - 'afd.sys' Dangling Pointer Privilege Escalation (MS14-040)

Exploit Title: MS14-040 - AFD.SYS Dangling Pointer Date: 2016-02-05 Exploit Author: Rick Larabee Vendor Homepage: www.microsoft.com Version: Windows 7, 32 bit Tested on: Win7 x32 afd.sys - 6.1.7600.16385 ntdll.dll - 6.1.7600.16385 CVE : CVE-2014-1767 Category: Local Privilege Escalation Reference...

Debian: Security Advisory (DSA-3480-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 411-2] eglibc regression update

Package : eglibc Version : 2.11.3-4+deb6u10 CVE ID : CVE-2014-9761 Debian Bug : 814078 The fix for CVE-2014-9761 in Squeeze wrongly backported the upstream patch. New symbols were not declared as private and the ABI changed. This made some programs and services crash after the upgrade, and needed...

CVE-2016-0952

Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-0951 and CVE-2016-0953...

CVE-2016-0951

Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-0952 and CVE-2016-0953...

CVE-2016-0953

Adobe Photoshop CC 2014 before 15.2.4, Photoshop CC 2015 before 16.1.2, and Bridge CC before 6.2 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-0951 and CVE-2016-0952...

CVE-2016-0951

CVE-2016-0951 affects Adobe Bridge CC prior to 6.2, with multiple memory‑corruption vulnerabilities that can allow a remote attacker to execute arbitrary code or cause a denial of service. In the provided OpenVAS entries, affected product is Bridge CC

CVE-2014-9757

CVE-2014-9757 affects Atlassian Bamboo prior to 5.9.9 and 5.10.x prior to 5.10.0, due to a deserialization vulnerability in the Ignite Realtime Smack XMPP API used by Bamboo. Remote configured XMPP servers can send serialized data in XMPP messages to execute arbitrary Java code on Bamboo servers....

Apple IOS PDF Reader Parsing Memory Corruption (CVE-2014-4377)

A memory corruption vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to incorrect memory buffer allocation while parsing a corrupted PDF file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

Mageia: Security Advisory (MGASA-2016-0049)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : the Linux Kernel (openSUSE-2016-136)

The openSUSE 13.2 kernel was updated to receive various security and bugfixes. Following security bugs were fixed : - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962075. - CVE-2015-7550: A local user could have...