RHEL 6 / 7 : ror40-rubygem-actionpack (RHSA-2016:1857)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:1857 advisory. Ruby on Rails is a model-view-controller MVC framework for web application development. Action Pack implements the controller and the view...

RHEL 7 : openvswitch (RHSA-2016:0537)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:0537 advisory. Open vSwitch provides standard network bridging functions and support for the OpenFlow protocol for remote per-flow control of traffic. Security Fixe...

RHEL 6 / 7 : ruby193-rubygem-actionpack (RHSA-2016:1858)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2016:1858 advisory. Ruby on Rails is a model-view-controller MVC framework for web application development. Action Pack implements the controller and the view...

RHEL 7 : qemu-kvm-rhev (RHSA-2017:0982)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0982 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provi...

RHEL 6 / 7 : rh-ror41 (RHSA-2016:0456)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0456 advisory. The rh-ror41 collection provides Ruby on Rails version 4.1. Ruby on Rails is a model-view-controller MVC framework for web application...

RHEL 6 / 7 : rh-mariadb100-mariadb (RHSA-2016:1604)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:1604 advisory. MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. The...

CVE-2016-0457

creationtimestamp| type| source ---|---|--- 2024-11-01 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-01 2024-11-03 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-03 2024-11-28 00:00:00+00:00| seen| The Shadowserver...

SUSE SLES12 Security Update : libgsf (SUSE-SU-2024:3770-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3770-1 advisory. - CVE-2016-9888: Fixed null pointer dereference with corrupted tar files bsc1014609 - CVE-2024-36474: Fixed out-of-bounds index when processing...

K000148351: PostgreSQL vulnerabilities CVE-2017-15098, CVE-2017-14798, CVE-2016-7048, CVE-2016-5424, and CVE-2016-5423

Security Advisory Description CVE-2017-15098 Invalid jsonpopulaterecordset or jsonbpopulaterecordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory...

SUSE: Security Advisory (SUSE-SU-2024:3770-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:3770-1 Security update for libgsf

This update for libgsf fixes the following issues: - CVE-2016-9888: Fixed null pointer dereference with corrupted tar files bsc1014609 - CVE-2024-36474: Fixed out-of-bounds index when processing a directory via an integer overflow in the compound document binary file format parser bsc1231282 -...

K000148259: libarchive vulnerability CVE-2016-10350 and CVE-2016-10349

Security Advisory Description CVE-2016-10350 The archivereadformatcabreadheader function in archivereadsupportformatcab.c in libarchive 3.2.2 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file. CVE-2016-10349 The archivele32de...

K000148250: PostgreSQL vulnerabilities CVE-2016-0766, CVE-2015-3167, CVE-2015-0243, CVE-2015-0242, and CVE-2015-0241

Security Advisory Description CVE-2016-0766 PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings GUCS for PL/Java, which allows attackers to gain privileges via...

F5 Networks BIG-IP : libarchive vulnerability (K000148259)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the K000148259 advisory. CVE-2016-10350The archivereadformatcabreadheader function in archivereadsupportformatcab.c in libarchive...

A week in security (October 14 – October 20)

Last week on Malwarebytes Labs: Unauthorized data access vulnerability in macOS is detailed by Microsoft 23andMe will retain your genetic information, even if you delete the account "Nudify" deepfake bots remove clothes from victims in minutes, and millions are using them Tor Browser and Firefox...

Adobe InDesign < 12.0.0 (APSB16-43)

The version of Adobe InDesign installed on the remote Windows host is prior to 12.0.0. It is, therefore, affected by a vulnerability as referenced in the APSB16-43 advisory. - Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption...

Adobe Creative Cloud < 3.8.0.310 (APSB16-34)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 3.8.0.310. It is, therefore, affected by a vulnerability as referenced in the APSB16-34 advisory. - Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.8.0.310 on Windo...

Adobe Digital Editions < 4.5.3 Multiple Vulnerabilities (APSB16-45) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB16-45 advisory. - Adobe Digital Editions versions 4.5.2 and earlier has an issue with parsing crafted XML entries that could...

Adobe Digital Editions < 4.5.2 Multiple Vulnerabilities (APSB16-28) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB16-28 advisory. - Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary...

Adobe Creative Cloud < 3.7.0.272 Multiple Vulnerabilities (APSB16-21)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 3.7.0.272. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB16-21 advisory. - Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272...