Security fix for the ALT Linux 8 package openssl10 version 1.0.2h-alt1

1.0.2h-alt1 built May 4, 2016 Gleb Fotengauer-Malinovskiy in task 164216 May 3, 2016 Gleb Fotengauer-Malinovskiy - Updated to 1.0.2h fixes CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176...

CVE-2016-2107

creationtimestamp| type| source ---|---|--- 2016-05-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39768 2026-07-19 11:00:03+00:00| seen| https://t.me/certkznews/53 2026-07-20 00:00:26+00:00| seen| https://t.me/certkznews/53...

[SECURITY] [DSA 3566-1] openssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3566-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini May 03, 2016 https://www.debian.org/security/faq -...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Redhat Enterprise_Linux_Desktop

CVE-2016-2107 Simple test for the May 2016 OpenSSL padding ora...

SUSE-SU-2016:1206-1 Security update for openssl1

This update for openssl1 fixes the following issues: Security issues fixed: - CVE-2016-2108: Memory corruption in the ASN.1 encoder bsc977617 - CVE-2016-2107: Padding oracle in AES-NI CBC MAC check bsc977616 - CVE-2016-2105: EVPEncodeUpdate overflow bsc977614 - CVE-2016-2106: EVPEncryptUpdate...

Security fix for the ALT Linux 10 package openssl1.1 version 1.0.2h-alt1

May 3, 2016 Gleb Fotengauer-Malinovskiy 1.0.2h-alt1 - Updated to 1.0.2h fixes CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176...

Security fix for the ALT Linux 9 package openssl10 version 1.0.2h-alt1

May 3, 2016 Gleb Fotengauer-Malinovskiy 1.0.2h-alt1 - Updated to 1.0.2h fixes CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176...

Important: openssl

Issue Overview: A vulnerability was discovered that allows a man-in-the-middle attacker to use a padding oracle attack to decrypt traffic on a connection using an AES CBC cipher with a server supporting AES-NI. CVE-2016-2107, Important It was discovered that the ASN.1 parser can misinterpret a...

Oracle: Security Advisory (ELSA-2008-0544)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2107

HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges...

CVE-2015-2107

HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges...

CVE-2015-2107

HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges...

CVE-2015-2107

CVE-2015-2107 affects HP Operations Manager i Management Pack for SAP (1.x) prior to 1.01. The vulnerability allows local users to execute OS commands by leveraging SAP administrative privileges. The available documents do not provide additional details on root cause specifics, affected versions ...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0612-1)

This update fixes a cross-site scripting vulnerability. CVE-2011-2107: CVSS v2 Base Score: 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update flash-player-4665. The...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0612-1)

This update fixes a cross-site scripting vulnerability. CVE-2011-2107: CVSS v2 Base Score: 5.8 AV:N/AC:M/Au:N/C:P/I:P/A:N %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update flash-player-4665. The...

CVE-2013-2107

Cross-site request forgery CSRF vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change the "List of alternative recipients" via the mailonupdatemailto parameter in the mail-on-update pag...

CVE-2013-2107

The CVE-2013-2107 entry concerns the WordPress Mail On Update plugin, affected in versions before 5.2.0. The vulnerability is a Cross‑Site Request Forgery (CSRF) that lets an attacker exploit an authenticated admin session to change the "List of alternative recipients" via the mailonupdate_mailto...

CVE-2014-2107

Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows remote attackers to cause a denial of service route switch processor outage via crafted IP packets, aka Bug ID CSCug84789...

CVE-2012-2107

Integer overflow in the main function in util/lpcimain.c in Csound before 5.17.2, when converting a file, allows user-assisted remote attackers to execute arbitrary code via a crafted file, which triggers a heap-based buffer overflow...

CVE-2012-2107

Csound prior to 5.17.2 suffers an integer overflow in util/lpci_main.c during file conversion, triggering a heap-based buffer overflow that could allow remote code execution. This is documented across multiple sources (SUSE/OpenSUSE, Ubuntu, Debian osv, etc.). Affected version: Csound