[SECURITY] [DSA 3508-1] jasper security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3508-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 06, 2016 https://www.debian.org/security/faq -...

DSA-3508-1 jasper - security update

Bulletin has no description...

Debian: Security Advisory (DSA-3508-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : jasper (openSUSE-2016-185)

This update fixes the following issue : - CVE-2016-2089: invalid read in the JasPer's jasmatrixclip function bsc963983 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-185. The te...

openSUSE Security Update : jasper (openSUSE-2016-180)

This update for jasper fixes the following issues : - CVE-2016-2089: Specially crafted JPEG 2000 may cause JasPer to crash boo963983 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2016-2089

The jasmatrixclip function in jasseq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service invalid read and application crash via a crafted JPEG 2000 image...

CVE-2016-2089

JasPer 1.900.1 and earlier contains CVE-2016-2089 in jas_matrix_clip (jas_seq.c): a crafted JPEG 2000 image can trigger an invalid read leading to remote denial of service (application crash). Public advisories and vendor notes confirm multiple JasPer-related CVEs with this and related variants, ...

CVE-2016-2089

The jasmatrixclip function in jasseq.c in JasPer 1.900.1 allows remote attackers to cause a denial of service invalid read and application crash via a crafted JPEG 2000 image...

CVE-2015-2089

CVE-2015-2089 concerns the CrossSlide jQuery plugin for WordPress (version 2.0.5 and earlier). The vulnerability arises from CSRF flaws in the plugin’s admin flow: parameters such as csj_width, csj_height, csj_sleep, csj_fade, and upload_image pass through the thisismyurl_csj.php page to wp-admin...

Code injection

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2089...

CVE-2014-2620

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2089...

CVE-2014-2620

CVE-2014-2620 is an information-disclosure vulnerability in HP iMC (HP Intelligent Management Center) and HP BIMS (Branch Intelligent Management System), affecting iMC before 7.0 E02020P03 and BIMS before 7.0 E0201P02. The issue allows remote attackers to obtain sensitive information via unknown ...

CVE-2013-2089

CVE-2013-2089 affects ownCloud up to version 5.0.6, where an incomplete blacklist in file upload handling allows authenticated remote users to execute arbitrary PHP code by uploading a crafted file and then requesting it directly from /data. The issue originates from insufficient validation of up...

CVE-2014-2089

ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a certain clientid pathname...

CVE-2014-2089

ILIAS 4.4.1 is affected by a remote code execution vulnerability that allows an attacker to create a .php file via a crafted email attachment, using a client_id pathname. Affected software: ILIAS

Ubuntu Update for openjdk-7 USN-2089-1

Check for the Version of openjdk-7 OpenVAS Vulnerability Test $Id: gbubuntuUSN20891.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for openjdk-7 USN-2089-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Ubuntu 12.10 / 13.04 / 13.10 : openjdk-7 vulnerabilities (USN-2089-1)

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure and data integrity. An attacker could exploit these to expose sensitive data over the network. CVE-2013-3829, CVE-2013-5783, CVE-2013-5804, CVE-2014-0411 Several vulnerabilities were discovered in the...

GLSA-201401-04 : Python: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201401-04 Python: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Python. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly cause a Denial of Servic...

Oracle Linux 4 : python (ELSA-2011-0491)

From Red Hat Security Advisory 2011:0491 : Updated python packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

Incomplete blacklist vulnerability - ownCloud

Incomplete blacklist vulnerability in ownCloud before 5.0.6 allows authenticated remote attackers to execute arbitrary PHP code by uploading a crafted file and accessing an uploaded PHP file. Note: Successful exploitation requires that the /data/ directory is stored inside the webroot and a...