36092 matches found
Security Bulletin: Vulnerability in IBM Java SDK affect IBM Spectrum Scale RAID/IBM GPFS Native RAID (CVE-2015-7575)
Summary There is a vulnerability in IBM® SDK Java™ Technology Edition, Version 8 that is used by IBM Spectrum Scale RAID/IBM GPFS Native RAID. This vulnerability, commonly referred to as “SLOTH”, was disclosed as part of the IBM Java SDK updates in January 2016. Vulnerability Details CVEID:...
JVN#68418039: The installers of E START products may insecurely load Dynamic Link Libraries
The installers of E START products by GMO INSIGHT Inc. contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries in the folder specified by the TEMP environment variable or where the installer resides CWE-427, CVE-2015-9267, and CVE-2015-9268. Impact...
Apple Quicktime Remote Code Execution (CVE-2015-7088)
A remote code execution vulnerability exists in Apple Quicktime. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
[SECURITY] Fedora 32 Update: libmysofa-1.2-4.fc32
This is a simple set of C functions to read AES SOFA files, if they contain HRTFs stored according to the AES69-2015 standard...
Security Bulletin: IBM Resilient SOAR is using opensaml-2.6.4.jar that could be vulnerable to bypass security restrictions (CVE-2015-1796)
Summary opensaml-2.6.4.jar vulnerable to CVE-2015-1796, Shibboleth Identity Provider could allow a remote attacker to bypass security restrictions, caused by an error in the PKIX trust component. An attacker could exploit this vulnerability using a certificate issued by the shibmd:KeyAuthority...
PT-2021-6276 · Netplex · Netplex Json-Smart-V1 +1
Name of the Vulnerable Software and Affected Versions: netplex json-smart-v1 versions through 2015-10-23 netplex json-smart-v2 versions through 2.4 Description: An issue was discovered where an exception is thrown from a function but not caught, as demonstrated by NumberFormatException. This may...
Debian DLA-2571-1 : openvswitch security update
Several issues have been found in openvswitch, a production quality, multilayer, software-based, Ethernet virtual switch. CVE-2020-35498 Denial of service attacks, in which crafted network packets could cause the packet lookup to ignore network header fields from layers 3 and 4. The crafted netwo...
[SECURITY] [DLA 2571-1] openvswitch security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2571-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz February 19, 2021 https://wiki.debian.org/LTS -...
Update jQuery to avoid CVE-2020-11022, CVE-2020-11023, and CVE-2015-9251
Crowd was using jQuery version 1.8.3, which is affected by CVE-2020-11023, CVE-2020-11022, and CVE-2015-9251. Affected Version/s: 4.0.3, 4.1.1 Fixed Version/s: 4.1.2, 4.0.4, 4.2.0...
Microsoft Skype Security Breach
Microsoft Skype is a communication application from Microsoft USA. The program provides video calls and voice calls to other devices over the Internet for computers and mobile devices such as cell phones. A security vulnerability exists in Microsoft Skype for Business and Lync. The following...
Microsoft Lync Server Security Vulnerability
Microsoft Lync Server formerly known as Microsoft Office Communicator is a set of enterprise integrated communication platform from Microsoft. The platform is capable of integrating different communication methods into a single platform across PCs, the Web, and other mobile devices such as cell...
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...
RHEL 6 : Storage Server (RHSA-2015:0257)
Updated samba packages that fix one security issue are now available for Red Hat Storage 2.1. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available from the CVE...
CentOS 8 : pki-core:10.6 and pki-deps:10.6 (CESA-2020:4847)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4847 advisory. - jquery: Cross-site scripting via cross-domain ajax requests CVE-2015-9251 - bootstrap: XSS in the data-target attribute CVE-2016-10735 - bootstrap:...
CentOS 8 : idm:DL1 and idm:client (CESA-2020:4670)
The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4670 advisory. - jquery: Cross-site scripting via cross-domain ajax requests CVE-2015-9251 - bootstrap: XSS in the data-target attribute CVE-2016-10735 - bootstrap:...
Code Injection and Directory Traversal in plexus-utils
This vulnerability allows unauthenticated remote attackers to inject code and XML as well as perform directory traversal via CVE-2017-1000487 - command injection sonatype-2016-0398 - directory traversal sonatype-2015-0173 - XML Injection The affected versions are before version 7.2.2, and before...
Debian DSA-4836-1 : openvswitch - security update
Two vulnerabilities were discovered in the LLPD implementation of Open vSwitch, a software-based Ethernet virtual switch, which could result in denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...
[SECURITY] [DSA 4836-1] openvswitch security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4836-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 22, 2021 https://www.debian.org/security/faq -...
VulnCheck KEV: CVE-2015-9251
jQuery before 3.0.0 is vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed...
