Fedora 25 : picocom (2017-ac7fc2fd8c)

Upgrade to 2.2, fixing CVE-2015-9059 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

About the security content of iTunes 12.4.2 for Windows - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2015-2692

AdBlock before 2.21 allows remote attackers to block arbitrary resources on arbitrary websites and to disable arbitrary blocking filters...

CVE-2015-1786

Cross-site request forgery CSRF vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or malformed token identifiers...

CVE-2015-1379

The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of service process freeze or crash...

CVE-2015-2692

AdBlock before 2.21 allows remote attackers to block arbitrary resources on arbitrary websites and to disable arbitrary blocking filters...

CVE-2015-1786

Cross-site request forgery CSRF vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or malformed token identifiers...

CVE-2015-1786

CVE-2015-1786 : A CSRF vulnerability in Zend Framework 2.3.x (Zend/Validator/Csrf) before 2.3.6 arises from handling of token identifiers that can be null or malformed. This could allow an attacker to forge requests and perform unauthorized actions on behalf of a user. Affected software: Zend Fra...

CVE-2015-1588

CVE-2015-1588 affects Open-Xchange Server 6 and OX AppSuite. The issue is multiple cross-site scripting (XSS) vulnerabilities caused by insufficient input filtering in the backend/OX AppSuite, enabling execution of crafted script in a user’s browser context and potential session-related issues. A...

CVE-2015-3913

CVE-2015-3913 affects Huawei Campus series switch IP stacks. According to Huawei’s advisory HWPSIRT-2015-02003, the vulnerability arises from improper handling of IP options in the IP stack when processing crafted ICMP requests, which can cause a board reboot (denial of service). Other connected ...

CVE-2015-1379

CVE-2015-1379 affects socat prior to 1.7.3.0 and 2.0.0-b8, where signal handler implementations are not async-signal-safe, enabling remote attackers to cause a denial of service (process freeze or crash). Impact is partial availability loss; exploitation is network-based. Affected products/versio...

CVE-2015-2692

The CVE-2015-2692 vulnerability affects the AdBlock extension prior to version 2.21. A remote attacker could cause the extension to block arbitrary resources on arbitrary websites and disable arbitrary blocking filters. The NVD entry notes this as a network-based, low complexity issue with no aut...

CVE-2015-3634

CVE-2015-3634 affects the WordPress Slideshow plugin (versions 2.2.8–2.2.21). The vulnerability arises in SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX, an AJAX action that can be invoked by unauthenticated users, allowing remote readers to disclose arbitrary WordPress option values. C...

CVE-2015-2255

Huawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a denial of service board reset via vectors involving a large amount of traffic from the GE port to the FE port...

CVE-2015-2251

The DeviceManager in Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to obtain sensitive information via a crafted UDS patch with JavaScript...

CVE-2015-2253

The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated users to obtain sensitive information via a crafted XML document...

CVE-2015-2251

The CVE describes an information-disclosure vulnerability in Huawei OceanStor UDS DeviceManager. A remote attacker could obtain sensitive data by injecting JavaScript into a patch loaded by DeviceManager. Affected software: Huawei OceanStor UDS devices with DeviceManager before V100R002C01SPC102....

CVE-2015-2253

Huawei OceanStor UDS XML interface information-disclosure vulnerability (CVE-2015-2253) affects UDS software prior to V100R002C01SPC102. A remote-authenticated user can trigger crafted XML to obtain sensitive files. CNVD and CNVD-2017-22534 confirm affected versions up to V100R002C01SPC101 and ea...

CVE-2015-2800

CVE-2015-2800 affects Huawei Campus switches: S5700/S5300/S6300/S6700 with software before V200R001SPH012 and S7700/S9300/S9700 with software before V200R001SPH015. The issue is an authentication-triggered array access violation in the user authentication module that can cause a remote DoS (devic...

CVE-2015-2252

Huawei OceanStor UDS devices prior to V100R002C01SPC102 are affected by CVE-2015-2252 where an attacker can inject shell scripts into UDS patches and execute them with root privileges via a crafted patch. CNVD-2017-22533 confirms a remote code injection vector in UDS V100R002C01SPC101 and earlier...