Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2h-alt1

May 3, 2016 Gleb Fotengauer-Malinovskiy 1.0.2h-alt1 - Updated to 1.0.2h fixes CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2h-alt1

May 3, 2016 Gleb Fotengauer-Malinovskiy 1.0.2h-alt1 - Updated to 1.0.2h fixes CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176...

Important: openssl

Issue Overview: A vulnerability was discovered that allows a man-in-the-middle attacker to use a padding oracle attack to decrypt traffic on a connection using an AES CBC cipher with a server supporting AES-NI. CVE-2016-2107, Important It was discovered that the ASN.1 parser can misinterpret a...

CVE-2013-2105

The CVE-2013-2105 entry concerns the Show In Browser gem for Ruby (version 0.0.3). The root cause is a symlink attack on /tmp/browser.html, which allows local users to inject arbitrary web script or HTML. Practical impact is described as a local vulnerability enabling script execution via manipul...

Ubuntu: Security Advisory (USN-2105-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-2105

Timesheet Next Gen 1.5.2 contains multiple SQL injection vulnerabilities in login.php that allow remote attackers to execute arbitrary SQL commands through the username or password parameters. This CVE entry is supported by NVD/NVD-derived records and multiple references. No remediation or fix de...

RHEL 6 : acroread (RHSA-2011:1434)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1434 advisory. Adobe Reader allows users to view and print documents in Portable Document Format PDF. This update fixes multiple security flaws in Adobe...

CVE-2011-2105

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and Mac OS X allow attackers to cause a denial of service memory corruption or possibly have unspecified other impact via crafted font data...

CVE-2011-2105

Adobe Reader and Acrobat 8.x before 8.3, 9.x before 9.4.5, and 10.x before 10.1 on Windows and macOS are affected by CVE-2011-2105 due to crafted font data causing memory corruption and potential denial of service or other impacts. The issue is acknowledged in multiple advisories (e.g., RHSA-2011...

Adobe Reader PDF CIDFont Dictionary Memory Corruption (APSB11-16; CVE-2011-2105)

A memory corruption vulnerability exists in Adobe Reader. The vulnerability is due to an error in the Adobe Reader when handling PDF files that contain CIDFont Dictionary entries. A remote attacker could trigger these flaws via a specially crafted PDF file. Successful exploitation will cause a...

CVE-2010-2105

Google Chrome before 5.0.375.55 does not properly follow the Safe Browsing specification's requirements for canonicalization of URLs, which has unspecified impact and remote attack vectors...

CVE-2010-2105

CVE-2010-2105 affects Google Chrome up to version 5.0.375.55. The issue stems from Chrome not properly following Safe Browsing URL canonicalization requirements, with unspecified impact and remote attack vectors. Affected product is Chrome; root cause tied to Safe Browsing canonicalization. Remed...

CVE-2010-2105

Removed by vendor...

CVE-2009-2105

CVE-2009-2105 affects the TYPO3 References database (t3references) extension versions up to 0.1.1. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL via unspecified vectors, with a CVSS v2 base score of 7.5 (HIGH). Transport/attack vector: network; impact:...

Fedora Update for bugzilla FEDORA-2008-3442

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for bugzilla FEDORA-2008-3488

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for bugzilla FEDORA-2008-3668

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 8 : bugzilla-3.0.4-1.fc8 (2008-3442)

Update to upstream 3.0.4 to resolve multiple sec vulns Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2008-2105

CVE-2008-2105 affects Bugzilla: vulnerable in Bugzilla 2.23.4 and 3.0.x before 3.0.4, and 3.1.x before 3.1.4. A remote authenticated user can abuse the @reporter command in the body of an email to spoof the bug changer, overriding the address from the From header. This bypasses normal From-header...

Microsoft Windows Message Queuing Service - RPC Buffer Overflow (MS07-065) (1)

Microsoft Windows Message Queuing Service - RPC Buffer Overflow MS07-065 1 / Windows Message Queuing Service Remote RPC BOF Exploit MS07-065 by axis http://www.ph4nt0m.org you should know the dnsname of target to trigger this vuln the service runs on port 2103/2105/2107...