74 matches found
CVE-2016-2066
CVE-2016-2066 affects the MSM QDSP6 audio driver in the Linux kernel 3.x as used in Qualcomm QuIC Android contributions for MSM devices and related products. The issue is an integer signedness error in the msm-audio-effects-q6-v2.c path that handles ioctl commands, leading to memory corruption. P...
google.com.lb XSS vulnerability
Vulnerable URL: https://www.google.com.lb/url?q=https://myaccount.google.com/signin?continue=https://goo.gl/bFrRLW Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2066 VIP website status:| Yes Check google.com.lb...
CVE-2015-2066
CVE-2015-2066 affects DLGuard 4.5. A SQL injection flaw in index.php via the c parameter allows remote attackers to execute arbitrary SQL commands; exploitation details are provided by CNVD/CVE records, but no patch or mitigation is specified in the supplied documents.
Amazon Linux AMI : libX11 / libXcursor,libXfixes,libXi,libXrandr,libXrender,libXres,libXt,libXv,libXvMC,libXxf86dga,libXxf86vm,libdmx,xorg-x11-proto-devel (ALAS-2014-452)
Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws to potentially...
CentOS 6 : libX11 / libXcursor / libXext / libXfixes / libXi / libXinerama / libXp / libXrandr / etc (CESA-2014:1436)
Updated X11 client libraries packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...
CVE-2014-2066
Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the "override" of Jenkins cookies...
CVE-2014-2066
Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the "override" of Jenkins cookies...
CVE-2014-2066
CVE-2014-2066 affects Jenkins servers prior to 1.551 and LTS prior to 1.532.2. The vulnerability is a session fixation flaw where an attacker can hijack a user web session by manipulating Jenkins cookies through the override mechanism. Exploitation details are not provided in the included documen...
openSUSE Security Update : libXv (openSUSE-SU-2013:1010-1)
This update of libXrender fixes several buffer and integer overflow issues. - U0001-integer-overflow-in-XvQueryPortAttributes-CVE-201 3-1.patch, U0002-integer-overflow-in-XvListImageFormats-CVE-2013-1 989.patch, U0003-integer-overflow-in-XvCreateImage-CVE-2013-1989-3 -3.patch - integer overflow i...
SuSE 11.3 Security Update : xorg-x11-libXv (SAT Patch Number 7943)
This update of xorg-x11-libXv fixes several integer and buffer overflow issues. Bug 815451/821671 CVE-2013-1989 / CVE-2013-2066 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itse...
Fedora 18 : libXv-1.0.7-5.20130524git50fc4cb18.fc18 (2013-9188)
Update to latest git to fix the following CVEs: CVE-2013-1989, CVE-2013-2066 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
Oracle Linux 5 : kernel (ELSA-2010-0610)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0610 advisory. - fs xfs: don't let swapext operate on write-only files Jiri Pirko 605160 605161 CVE-2010-2226 - fs nfs: fix bug in nfsd4 readbuf Jiri Olsa 612034 6120...
CVE-2013-2066
Buffer overflow in X.org libXv 1.0.7 and earlier allows X servers to cause a denial of service crash and possibly execute arbitrary code via crafted length or index values to the XvQueryPortAttributes function...
CVE-2013-2066
CVE-2013-2066 describes a buffer overflow in X.Org libXv up to version 1.0.7 and earlier, caused by an integer overflow in XvQueryPortAttributes(). A remote attacker could exploit this via a crafted X server connection to crash the application or potentially execute arbitrary code. The vulnerabil...
Fedora Update for libXv FEDORA-2013-9188
Check for the Version of libXv OpenVAS Vulnerability Test Fedora Update for libXv FEDORA-2013-9188 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...
Fedora 19 : libXv-1.0.7-5.20130524git50fc4cb18.fc19 (2013-9066)
Update to latest git to fix the following CVEs: CVE-2013-1989, CVE-2013-2066 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
[SECURITY] [DSA 2674-1] libxv security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2674-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...
Ubuntu 10.04 LTS : linux-lts-backport-maverick vulnerabilities (USN-1083-1)
Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service...
CVE-2012-2066
Cross-site scripting XSS vulnerability in the FCKeditor module 6.x-2.x before 6.x-2.3 and the CKEditor module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.7 for Drupal allows remote authenticated users or remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-2066
Cross-site scripting XSS vulnerability in the FCKeditor module 6.x-2.x before 6.x-2.3 and the CKEditor module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.7 for Drupal allows remote authenticated users or remote attackers to inject arbitrary web script or HTML via unspecified vectors...