Slackware 14.1 / 14.2 : mariadb (SSA:2019-032-01)

New mariadb packages are available for Slackware 14.1 and 14.2 to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-032-01. The text itself is copyright C Slackware Linux, Inc...

[slackware-security] mariadb

New mariadb packages are available for Slackware 14.1 and 14.2 to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mariadb-10.0.38-i586-1slack14.2.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...

CVE-2019-2537 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2019-2537

CVE-2019-2537 affects the MySQL Server component (subcomponent: Server: DDL) of Oracle MySQL. Affected: 5.6.42 and prior, 5.7.24 and prior, 8.0.13 and prior. Description in connected docs confirms an easily exploitable, network-accessible vulnerability that can cause the MySQL Server to hang or c...

Oracle MySQL Server <= 5.6.42 / 5.7 <= 5.7.24 / 8.0 <= 8.0.13 Security Update (cpujan2019) - Windows

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Security Bulletin: Two ReDoS vulnerabilities in modules included in the Node.js npm tool affect IBM Rational Application Developer for WebSphere Software included in Rational Developer for i and Rational Developer for AIX and Linux

Summary Portions of IBM Rational Application Developer for WebSphere Software are shipped as a component of Rational Developer for i RPG and COBOL + Modernization Tools, Java and EGL editions, and Rational Developer for AIX and Linux. Two ReDoS vulnerabilities in modules included in the Node.js n...

Security Bulletin: Two ReDoS vulnerabilities in modules included in the Node.js npm tool

Summary Two ReDoS vulnerabilities in modules included in the Node.js npm tool shipped by IBM Rational Application Developer for WebSphere Software. Vulnerability Details CVEID: CVE-2016-2515 DESCRIPTION: Node.JS hawk is vulnerable to a denial of service, caused by an error in the regular expressi...

meadow (>=1.0.1, <=1.0.16), norm (>=1.3.0, <=2.3.2) +1 more potentially affected by CVE-2016-2537 via is-my-json-valid (>=2.10.1, <=2.12.3)

is-my-json-valid NPM version =2.10.1, =1.0.1, =1.3.0, =2.3.2 - tartare-logs 0.5.0 Source cves: CVE-2016-2537 Source advisory: OSV:GHSA-F522-FFG8-J8R6...

CVE-2017-2537

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "WindowServer" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-2537

Summary (CVE-2017-2537) : A memory corruption vulnerability in the macOS WindowServer component can enable a locally-executed arbitrary code execution or memory corruption leading to privilege escalation, affecting macOS Sierra and related builds prior to 10.12.5. The issue is documented in CVE-2...

Apple Mac OS X Multiple Vulnerabilities - 01 - (HT207797)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2537

CVE-2015-2537 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2015-2537

...

CVE-2012-2537

...

CVE-2012-2537

CVE-2012-2537 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2016-2537

The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports'utc-millisec' regular expression, which allows remote attackers to cause a denial of service blocked event loop via a crafted string...

CVE-2016-2537

CVE-2016-2537 affects the is-my-json-valid package for Node.js, where an incorrect exports["utc-millisec"] regular expression can be exploited to cause a denial-of-service by blocking the event loop. The core detail across documents is that the vulnerability arises in the is-my-json-valid module ...

Ubuntu 14.04 LTS : OpenSSL vulnerabilities (USN-2537-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2537-1 advisory. It was discovered that OpenSSL incorrectly handled malformed EC private key files. A remote attacker could possibly use this issue to cause OpenSSL to...

Ubuntu: Security Advisory (USN-2537-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Schneider Electric Accutech Manager Heap Overflow PoC

No description provided by source. Schneider Electric Accutech Manager Server Heap Overflow PoC RFManagerService - Port: 2537 I think this is the same vuln that ExodusIntel discovered. Credit also goes to Aaron Portnoy, ExodusIntel. The patch has not been released yet. Evren Yalcin, Signalsec Ltd...