libpng security update

CentOS Errata and Security Advisory CESA-2015:2594 Updated libpng packages that fix three security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, whic...

Debian DLA-313-1 : virtualbox-ose security update

The latest maintenance release of the VirtualBox OSE 3.2.x series i.e., version 3.2.28 has been uploaded to Debian LTS squeeze. Thanks to Gianfranco Costamagna for preparing packages for review and upload by the Debian LTS Team. Unfortunately, Oracle no longer provides information on specific...

[SECURITY] [DLA 313-1] virtualbox-ose security update

Package : virtualbox-ose Version : 3.2.28-dfsg-1+squeeze1 CVE ID : CVE-2013-3792 CVE-2014-2486 CVE-2014-2488 CVE-2014-2489 CVE-2015-2594 Bugs : 715327 754939 792446 The latest maintenance release of the VirtualBox OSE 3.2.x series i.e., version 3.2.28 has been uploaded to Debian LTS squeeze. Than...

DLA-313-1 virtualbox-ose - security update

Bulletin has no description...

Debian DSA-3359-1 : virtualbox - security update

This update fixes an unspecified security issue in VirtualBox related to guests using bridged networking via WiFi. Oracle no longer provides information on specific security vulnerabilities in VirtualBox. To still support users of the already released Debian releases we've decided to update these...

Oracle VirtualBox Unspecified Vulnerability (Jul 2015) - Windows

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Oracle VirtualBox Unspecified Vulnerability (Jul 2015) - Linux

Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

CVE-2015-2594

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.32, 4.1.40, 4.2.32, and 4.3.30 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core...

CVE-2015-2594

CVE-2015-2594 affects Oracle VM VirtualBox before 4.0.32, 4.1.40, 4.2.32, and 4.3.30. The vulnerability is described as unspecified with potential impacts to confidentiality, integrity, and availability via unknown Core-related vectors (local access). Debian/OpenVAS entries indicate the issue is ...

Ubuntu 14.04 LTS : ClamAV vulnerabilities (USN-2594-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2594-1 advisory. It was discovered that ClamAV incorrectly handled certain malformed files. A remote attacker could use this issue to cause ClamAV to crash, resulting in ...

CVE-2013-2594

The CVE-2013-2594 issue is a SQL injection in Hornbill Supportworks ITSM, affecting the reports/calldiary.php endpoint. Exploitation via the callref parameter could allow remote attackers to inject arbitrary SQL and, per multiple sources, may lead to full control of the host (e.g., writing a webs...

hornbill supportworks SQL injection

Summary SQL Injection Vulnerability in ITSM component of Hornbill Supportworks Application CVE number: CVE-2013-2594 Impact: High Vendor homepage: http://www.hornbill.com Vendor notified: 19/11/2012 Vendor response: This issue has reportedly been fixed but the vendor refused to give version...

Hornbill Supportworks ITSM 1.0.0 - SQL Injection Vulnerability

SQL Injection Vulnerability in ITSM component of Hornbill Supportworks Application SQL Injection Vulnerability in ITSM component of Hornbill Supportworks Application CVE number: CVE-2013-2594 Impact: High Vendor homepage: http://www.hornbill.com Vendor notified: 19/11/2012 Vendor response: This...

Hornbill Supportworks ITSM 1.0.0 - SQL Injection

Summary SQL Injection Vulnerability in ITSM component of Hornbill Supportworks Application CVE number: CVE-2013-2594 Impact: High Vendor homepage: http://www.hornbill.com Vendor notified: 19/11/2012 Vendor response: This issue has reportedly been fixed but the vendor refused to give version...

Hornbill Supportworks ITSM 1.0.0 - SQL Injection

Hornbill Supportworks ITSM 1.0.0 - SQL Injection Summary SQL Injection Vulnerability in ITSM component of Hornbill Supportworks Application CVE number: CVE-2013-2594 Impact: High Vendor homepage: http://www.hornbill.com Vendor notified: 19/11/2012 Vendor response: This issue has reportedly been...

Hornbill Supportworks ITSM 1.0.0 SQL Injection

Summary SQL Injection Vulnerability in ITSM component of Hornbill Supportworks Application CVE number: CVE-2013-2594 Impact: High Vendor homepage: http://www.hornbill.com Vendor notified: 19/11/2012 Vendor response: This issue has reportedly been fixed but the vendor refused to give version...

Debian DSA-2594-1 : virtualbox-ose - programming error

'halfdog' discovered that incorrect interrupt handling in VirtualBox, a x86 virtualization solution, can lead to denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2594. Th...

KMPlayer '.kpl' File 'Title' Field Remote Buffer Overflow Vulnerability

This host is installed with KMPlayer and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbkmplayerkplfilebofvuln.nasl 5367 2017-02-20 14:16:52Z cfi $ KMPlayer '.kpl' File 'Title' Field Remote Buffer Overflow Vulnerability Authors: Madhuri D Copyright: Copyright c 2011...

CVE-2011-2594

KMPlayer is reported vulnerable to a heap-based buffer overflow in KMPlayer 3.0.0.1441 (and possibly other versions) that allows remote code execution via a playlist .KPL file with an excessively long Title field. Documents consistently describe this as a buffer overflow in the .kpl playlist hand...

KLA10331 SB vulnerability in Snare

A CSRF vulnerability was found in Snare. By exploiting this vulnerability malicious users can hijack administrator auth. This vulnerability can be exploited remotely. Original advisories - Related products Snare-for-Windows Epilog-for-Windows CVE list CVE-2010-2594 high Solution Update to latest...