113 matches found
libpng12 security update
CentOS Errata and Security Advisory CESA-2015:2595 Updated libpng12 packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores,...
Oracle: Security Advisory (ELSA-2010-0519)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-2595
Unspecified vulnerability in the Oracle OLAP component in Oracle Database Server 12.1.0.1 and 12.1.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...
CVE-2015-2595
CVE-2015-2595 affects Oracle Database Server 12.1.0.1 and 12.1.0.2 where the Oracle OLAP component contains an unspecified vulnerability that can be exploited by remote authenticated users to impact confidentiality, integrity, and availability via unknown vectors. The connected OpenVAS entry and ...
Ubuntu 14.04 LTS : ppp vulnerability (USN-2595-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2595-1 advisory. It was discovered that ppp incorrectly handled large PIDs. When pppd is used with a RADIUS server, a remote attacker could use this issue to cause it to crash,...
Ubuntu: Security Advisory (USN-2595-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-2595
The MSM camera driver for Linux kernel 2.6.x and 3.x , specifically within Qualcomm Innovation Center (QuIC) Android contributions , contains a design/logic flaw in its device-initialization functionality. The vulnerability allows MSM_CAM_IOCTL_SET_MEM_MAP_INFO ioctl calls to enable an unrestrict...
Barracuda WAF Authentication Bypass
Vulnerability title: Authentication Bypass in Barracuda Web Application Firewall CVE: CVE-2014-2595 Vendor: Barracuda Product: Web Application Firewall Affected version: Firmware v7.8.1.013 Fixed version: N/A Reported by: Nick Hayes Details: It is possible to re-use a link which includes a...
CVE-2014-2595
creationtimestamp| type| source ---|---|--- 2014-08-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39278...
Oracle Linux 5 : libtiff (ELSA-2010-0519)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0519 advisory. 3.8.2-7.el5.5 - Add fixes for multiple SIGSEGV problems, including CVE-2010-1411 Resolves: 602552 Tenable has extracted the preceding description block...
ACDSee FotoSlate PLP File id Parameter Overflow (CVE-2011-2595)
A parameter overflow vulnerability exists in ACDSee FotoSlate. The vulnerability is due to boundary errors in FSEngine4.dll when processing the "id" attribute certain tags. A remote attacker could trigger this flaw by tricking a victim into opening a specially crafted malicious .plp file...
Debian DSA-2595-1 : ghostscript - integer overflow
Marc Schoenefeld discovered that an integer overflow in the ICC parsing code of Ghostscript can lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-259...
Debian DSA-2552-1 : tiff - several vulnerabilities
Several vulnerabilities were discovered in TIFF, a library set and tools to support the Tag Image File Format TIFF, allowing denial of service and potential privilege escalation. These vulnerabilities can be exploited via a specially crafted TIFF image. - CVE-2012-2113 The tiff2pdf utility has an...
Fedora Update for java-1.7.0-openjdk FEDORA-2012-2595
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2012-2595
CVE-2012-2595 covers multiple reflected XSS vulnerabilities in Siemens WinCC 7.0 SP3 web applications prior to Update 2. The root cause is that web applications do not filter out special characters in URL parameters, enabling remote attackers to inject arbitrary script/HTML. The CVE is documented...
CVE-2011-2595
creationtimestamp| type| source ---|---|--- 2011-10-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17966 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/acdseefotoslatestring.rb 2025-02-06...
ACDSee FotoSlate - '.PLP' File 'id' Local Overflow (Metasploit)
$Id: acdseefotoslatestring.rb 13853 2011-10-10 16:47:33Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
ACDSee FotoSlate PLP File id Parameter Overflow
Exploit for windows platform in category local exploits $Id: acdseefotoslatestring.rb 13853 2011-10-10 16:47:33Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informati...
Security fix for the ALT Linux 5 package libtiff version 3.9.5-alt1.M50P.1
Sept. 29, 2011 Gleb Fotengauer-Malinovskiy 3.9.5-alt1.M50P.1 - Backport to p5 branch CVE-2010-3087 CVE-2010-2595 CVE-2011-0192 CVE-2011-1167 - no libtiffxx subpackage...
CVE-2011-2595
ACDSee FotoSlate 4.0 Build 146 is vulnerable to remote code execution via a crafted PLP file. The flaw is due to inadequate boundary checking in FSEngine4.dll when processing a long id parameter in a String tag, allowing a remote attacker to overflow a buffer. Exploitation techniques are document...