CVE-2016-2187

The gtcoprobe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service NULL pointer dereference and system crash via a crafted endpoints value in a USB device descriptor...

UBUNTU-CVE-2016-2187

The gtcoprobe function in drivers/input/tablet/gtco.c in the Linux kernel through 4.5.2 allows physically proximate attackers to cause a denial of service NULL pointer dereference and system crash via a crafted endpoints value in a USB device descriptor...

Fedora 23 : kernel-4.4.6-301.fc23 (2016-7e602c0e5e)

This is an incremental update for a set of bugzillas in the kernel Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 22 : kernel-4.4.6-201.fc22 (2016-ed5110c4bb)

This is an incremental update with a series of bugzilla fixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Gentoo Security Advisory GLSA 201510-03

Gentoo Linux Local Security Checks GLSA 201510-03 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-2187

The dissectatncpdlcheur function in asn1/atn-cpdlc/packet-atn-cpdlc-template.c in the ATN-CPDLC dissector in Wireshark 1.12.x before 1.12.4 does not properly follow the TRY/ENDTRY code requirements, which allows remote attackers to cause a denial of service stack memory corruption and application...

CVE-2015-2187

CVE-2015-2187 affects Wireshark 1.12.x before 1.12.4. The vulnerability lies in the ATN-CPDLC dissector (function dissect_atn_cpdlc_heur in asn1/atn-cpdlc/packet-atn-cpdlc-template.c), which does not properly follow TRY/ENDTRY code requirements, allowing remote attackers to trigger stack memory c...

KLA10518 Denial of service vulnerabilities in Wireshark

Integer overflows and other unspecified vulnerabilities were found in Wireshark. By exploiting these vulnerabilities malicious users can cause denial of service. These vulnerabilities can be exploited remotely via a specially designed packet. Original advisories Wireshark advisories Related...

Apache Archiva 1.2.x <= 1.2.2 / 1.3.x <= 1.3.6 Multiple Vulnerabilities

According to its self-reported version, the instance of Apache Archiva hosted on the remote web server is 1.2.x prior than or equal to 1.2.2 or 1.3.x prior than or equal to 1.3.6 and thus is affected by the following vulnerabilities : - An input validation error exists related to unspecified...

CVE-2013-2187

CVE-2013-2187 affects Apache Archiva: XSS in the Home Page parameter handling. Vulnerable versions are Archiva 1.2.x up to 1.2.2 and 1.3 up to 1.3.6 (before 1.3.8); the issue allows injection of arbitrary HTML/JS via unspecified parameters. The root cause is input validation related to the home p...

CVE-2012-2187

CVE-2012-2187 affects IBM Remote Supervisor Adapter II firmware for System x3650, x3850 M2, and x3950 M2 (versions 1.13 and earlier). The root cause is weak RSA key generation in the firmware, which may allow an attacker to remotely compromise the corresponding private key when using secure proto...

CVE-2010-2187

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service memory corruption or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166,...

CVE-2010-2187

Technical details for CVE-2010-2187 are not publicly available in the provided documents. Monitor for updates.

openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)

This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...

openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)

This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...

Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)

The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...

CVE-2009-2187

Multiple memory leaks in the 1 IP and 2 IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv67 through snv93, allow local users to cause a denial of service memory consumption via vectors related to the association of a DLENABMULTIREQ and b DLDISABMULTIREQ messages...

CVE-2009-2187

CVE-2009-2187 affects Sun Solaris 10 and OpenSolaris (snv_67–snv_93) where the kernel’s IP and IPv6 multicast stacks suffer memory leaks. The root cause involves leaks when processing DL_ENABMULTI_REQ and DL_DISABMULTI_REQ messages in conjunction with ARP traffic, enabling local users to cause de...

CVE-2008-2187

Cross-site scripting XSS vulnerability in mjguest.php in Mjguest 6.7 GT Rev.01 allows remote attackers to inject arbitrary web script or HTML via the level parameter in a redirect action, possibly involving interface/redirect.htm.php...

CVE-2008-2187

CVE-2008-2187 is an XSS vulnerability affecting Mjguest 6.7 GT Rev.01, where a remote attacker can inject arbitrary script via the level parameter in a redirect action (potentially involving interface/redirect.htm.php). The linked records (NVD, CVE listings) confirm the vulnerable component (mjgu...