35966 matches found
Updated cpio packages fix security vulnerabilities
in cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive CVE-2015-1197. Thomas Habets discovered that GNU cpio incorrectly handled certain inputs. An attacker could possibly use this issue to privilege...
EulerOS 2.0 SP5 : giflib (EulerOS-SA-2019-2152)
According to the versions of the giflib package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow in util/gif2rgb.c in gif2rgb in giflib 5.1.2 allows remote attackers to cause a denial of service application crash vi...
EulerOS 2.0 SP5 : pcre (EulerOS-SA-2019-2180)
According to the version of the pcre packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Integer overflow in the IOwstroverflow function in libio/wstrops.c in the GNU C Library aka glibc or libc6 before 2.22 allows context-dependent...
EulerOS 2.0 SP5 : qpdf (EulerOS-SA-2019-2185)
According to the version of the qpdf package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related ...
EulerOS 2.0 SP5 : unzip (EulerOS-SA-2019-2234)
According to the versions of the unzip package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash or possibly execute...
CVE-2015-7276
CVE-2015-7276 : Affected devices are Technicolor C2000T and C2100T that use hard-coded cryptographic keys. Root cause is hard-coded keys embedded in the devices, which can enable impersonation or man-in-the-middle via captured credentials or certificates. CVSS metrics indicate unauthenticated net...
Mozilla Firefox ESR < 31.6 Multiple Vulnerabilities
Binary data 701254.prm...
CVE-2015-8980
The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...
CVE-2015-8980
The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...
UBUNTU-CVE-2015-8980
The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...
CVE-2015-8980
The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code...
CVE-2015-8980
CVE-2015-8980 affects php-gettext up to version 1.0.11, where the plural form in ngettext calls can be exploited to execute arbitrary code. The root cause is mishandling of input in Gettext, leading to remote code execution. Affected advisories reference Ubuntu USN-4779-1, Mageia MGASA-2017-0038,...
Microsoft Windows Server 2012 Group Policy Security Feature Bypass
Exploit Title: Microsoft Windows Server 2012 - 'Group Policy' Security Feature Bypass Date: 2019-10-28 Exploit Author: Thomas Zuk Version: Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012, Windows RT, Windows 8.1, Windows...
Microsoft Windows Server 2012 Group Policy Remote Code Execution
Exploit Title: Microsoft Windows Server 2012 - 'Group Policy' Remote Code Execution Date: 2019-10-28 Exploit Author: Thomas Zuk Version: Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows 8, Windows Server 2012, Windows RT, Windows 8.1, Windows...
Microsoft Windows Server 2012 - Group Policy Remote Code Execution
Microsoft Windows Server 2012 - Group Policy Remote Code Execution Exploit Title: Microsoft Windows Server 2012 - 'Group Policy' Remote Code Execution Date: 2019-10-28 Exploit Author: Thomas Zuk Version: Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2,...
CVE-2015-0270
creationtimestamp| type| source ---|---|--- 2019-10-25 18:32:26+00:00| seen| https://t.me/cibsecurity/7667 2024-01-27 14:11:16+00:00| seen| https://t.me/ctinow/174769...
CVE-2015-0270
Zend Framework versions affected: <2.2.10 and with a potential SQL injection in the PostgreSQL Zend\Db adapter. Root cause: improper handling/validation in the Zend\Db adapter leading to injectable SQL when interacting with PostgreSQL. Impact: potential disclosure or modification of data via ...
Security Bulletin: Vulnerabilities in GSKit affect IBM Rational RequisitePro (CVE-2015-0159)
Summary GSKit is an IBM component that is used by IBM Rational RequisitePro. The GSKit that is shipped with Rational contains a security vulnerability and RequisitePro has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2015-0159 DESCRIPTION: An unspecified error in GSKit usage of...