CVE-2015-1642

creationtimestamp| type| source ---|---|--- 2019-06-18 06:53:33+00:00| published-proof-of-concept| https://t.me/Pen7esting/209 2021-10-01 10:11:31+00:00| published-proof-of-concept| https://t.me/cKure/7387 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04...

Cross-Site Scripting

Overview Versions of dojo prior to 1.2.0 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize HTML code in user-controlled input, allowing attackers to execute arbitrary JavaScript in the victim's browser. Recommendation Upgrade to version 1.2.0 or later. References - CVE -...

[SECURITY] Fedora 29 Update: php-phpmyadmin-sql-parser-4.3.2-1.fc29

A validating SQL lexer and parser with a focus on MySQL dialect. This library was originally developed for phpMyAdmin during the Google Summer of Code 2015. Autoloader: /usr/share/php/PhpMyAdmin/SqlParser/autoload.php...

KCodes NetUSB unauthenticated remote kernel arbitrary memory read vulnerability

Summary An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. A specially crafted index value can cause an invalid...

Malwarebytes Labs wins best cybersecurity vendor blog at InfoSec’s European Security Blogger Awards

Infosec Europe is now well underway, and last night was the annual EU Security Blogger Awards, where InfoSecurity Magazine: …recognises the best blogs in the industry as first nominated by peers and then judged by a panel of mostly respected industry experts. Malwarebytes Labs was announced as...

openSUSE: Security Advisory for screen (openSUSE-SU-2019:1485-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : screen (openSUSE-2019-1485)

This update for screen fixes the following issues : Security issue fixed : - CVE-2015-6806: Fixed a stack overflow due to deep recursion bsc944458. Non-security issue fixed : - Fixed segmentation faults related to altscreen and resizing screen bsc1130831. This update was imported from the...

CVE-2015-2230

creationtimestamp| type| source ---|---|--- 2019-05-31 00:34:16+00:00| seen| https://t.me/cibsecurity/4612...

CVE-2015-7609

creationtimestamp| type| source ---|---|--- 2019-05-31 00:34:15+00:00| seen| https://t.me/cibsecurity/4611...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0022)

The remote OracleVM system is missing necessary patches to address critical security updates : - scsi: libfc: sanitize EDTOV and RATOV setting Hannes Reinecke Orabug: 25933179 - scsi: libfc: use configured rport EDTOV Hannes Reinecke Orabug: 25933179 - scsi: libfc: additional debugging messages...

CVE-2015-2230

Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console...

CVE-2015-2230

CVE-2015-2230 affects Synacor Zimbra Collaboration Server 8.x prior to 8.7.0, where the admin console is vulnerable to a reflected cross‑site scripting (XSS) flaw. The issue arises from improper handling of user-supplied input in the admin console, allowing an attacker to execute client-side scri...

CVE-2015-7609

The CVE-2015-7609 entry concerns Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5, with a documented cross-site scripting (XSS) vulnerability. The issue affects the Zimbra client’s handling of input in error/warning dialogs and email body content, enabling XSS. Connected sources (Red Hat, NVD,...

EulerOS Virtualization for ARM 64 3.0.2.0 : fuse (EulerOS-SA-2019-1623)

According to the version of the fuse packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - It was discovered that fusermount failed to properly sanitize its environment before executing mount and umount commands. A...

EulerOS Virtualization 3.0.1.0 : fuse (EulerOS-SA-2019-1607)

According to the version of the fuse packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was discovered that fusermount failed to properly sanitize its environment before executing mount and umount commands. A local user...

Medium: libxml2

Issue Overview: A denial of service flaw was found in libxml2. A remote attacker could provide a specially crafted XML or HTML file that, when processed by an application using libxml2, would cause that application to leak potentially sensitive information.CVE-2015-8242 A denial of service flaw w...

EulerOS 2.0 SP3 : fuse (EulerOS-SA-2019-1575)

According to the version of the fuse packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It was discovered that fusermount failed to properly sanitize its environment before executing mount and umount commands. A local user could possibly...

SUSE SLED12 / SLES12 Security Update : screen (SUSE-SU-2019:1354-1)

This update for screen fixes the following issues : Security issue fixed : CVE-2015-6806: Fixed a stack overflow due to deep recursion bsc944458. Non-security issue fixed: Fixed segmentation faults related to altscreen and resizing screen bsc1130831. Note that Tenable Network Security has extract...

CVE-2019-7059

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2019-7023

Adobe Acrobat and Reader versions 2019.010.20069 and earlier, 2019.010.20069 and earlier, 2017.011.30113 and earlier version, and 2015.006.30464 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...