[SECURITY] [DLA 1740-1] libav security update

Package : libav Version : 6:11.12-1deb8u6 CVE ID : CVE-2015-1872 CVE-2017-14058 CVE-2017-1000460 CVE-2018-6392 CVE-2018-1999012 Debian Bug : Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2015-1872 The ffmjpegdecodesof function i...

CVE-2015-7578

creationtimestamp| type| source ---|---|--- 2019-03-29 15:45:20+00:00| published-proof-of-concept| https://t.me/YAHChannel/129...

Security Bulletin: IBM Security Directory Suite is affected by multiple vulnerabilities (CVE-2016-10142, CVE-2015-3331, CVE-2014-2523)

Summary IBM Security Directory Suite ISDS has addressed the following vulnerabilities due to buffer overflow, remote arbitrary code execution, and denial of service. Vulnerability Details CVEID: CVE-2016-10142 DESCRIPTION: The IETF IPv6 protocol is vulnerable to a denial of service. By leveraging...

Oracle Weblogic Server Deserialization RCE - Raw Object (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell' class MetasploitModule 'Oracle Weblogic Server Deserialization RCE - Raw Object', 'Description' = %q An unauthenticated attacker wi...

CVE-2015-1007

creationtimestamp| type| source ---|---|--- 2019-03-25 21:27:34+00:00| seen| https://t.me/cibsecurity/3336...

CVE-2015-1014

creationtimestamp| type| source ---|---|--- 2019-03-25 21:27:32+00:00| seen| https://t.me/cibsecurity/3334...

CVE-2015-1012

creationtimestamp| type| source ---|---|--- 2019-03-25 21:27:32+00:00| seen| https://t.me/cibsecurity/3335...

CVE-2015-3956

creationtimestamp| type| source ---|---|--- 2019-03-25 21:27:31+00:00| seen| https://t.me/cibsecurity/3333...

CVE-2015-3952

creationtimestamp| type| source ---|---|--- 2019-03-25 19:27:42+00:00| seen| https://t.me/cibsecurity/3331...

CVE-2015-3953

creationtimestamp| type| source ---|---|--- 2019-03-25 19:27:41+00:00| seen| https://t.me/cibsecurity/3330...

CVE-2015-3954

creationtimestamp| type| source ---|---|--- 2019-03-25 19:27:40+00:00| seen| https://t.me/cibsecurity/3329...

CVE-2015-1007

CVE-2015-1007 describes a stack-based buffer overflow in OPCTest.exe that could enable remote code execution on multiple Opto 22 PAC Project components (Professional/Basic, Display, OptoOPCServer, OptoDataLink) installed by PAC Project, for versions before the specified fixed releases. The root c...

CVE-2015-3956

Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior accept drug libraries, firmware updates, pump commands, and unauthorized configuration changes from unauthenticated devices on the host...

CVE-2015-1014

A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory on servers running Schneider Electric OFS v3.5 with version v7.40 of SCADA Expert Vijeo Citect/CitectSCADA, OFS v3.5 with version v7.30 of Vijeo Citect/CitectSCADA, and OFS v3....

CVE-2015-1014

CVE-2015-1014 affects Schneider Electric OPC Factory Server (OFS) 3.5 when used with SCADA Expert Vijeo Citect/CitectSCADA versions 7.20, 7.30, or 7.40. The vulnerability arises from DLL hijacking: a local user must load a crafted DLL into the system directory, and if the application opens that D...

CVE-2015-3954

Hospira Plum A+ Infusion System (versions 13.4 and earlier), Plum A+3 Infusion System (13.6 and earlier), and Symbiq Infusion System (3.13 and earlier) expose unauthenticated root privileges on Port 23/TELNET by default, allowing an unauthorized user to issue pump commands. Hospira notes Plum 360...

CVE-2015-3953

CVE-2015-3953 affects Hospira Plum A+ Infusion System (versions prior to 13.4), Plum A+3 Infusion System (prior to 13.6), and Symbiq Infusion System (prior to 3.13). Root cause: hard-coded credentials allowing access via affected devices; additional risk factors include services listening on Port...

CVE-2015-3952

Summary: CVE-2015-3952 concerns information disclosure from Hospira infusion systems where wireless keys are stored in plain text. Affected products: Plum A+ Infusion System v13.4 and earlier, Plum A+3 Infusion System v13.6 and earlier, and Symbiq Infusion System v3.13 and earlier. Root cause: cl...

CVE-2015-3965

creationtimestamp| type| source ---|---|--- 2019-03-23 23:29:26+00:00| seen| https://t.me/cibsecurity/3308...

CVE-2015-3965

Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevated privileges" for an unspecified call to an incorrectly exposed function...