openSUSE Security Update : virtualbox (openSUSE-2019-1814)

This update for virtualbox to version 6.0.10 fixes the following issues : Security issues fixed : - CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863 CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850...

openSUSE: Security Advisory for virtualbox (openSUSE-SU-2019:1814-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-2863

CVE-2019-2863 affects the Oracle VM VirtualBox core component. Affected are VirtualBox versions prior to 5.2.32 and prior to 6.0.10. The issue is described as an easily exploitable, local vulnerability that lets a low-privileged attacker with logon to the hosting infrastructure compromise Virtual...

CVE-2018-2863

CVE-2018-2863 affects Oracle Sun Systems Products Suite’s Sun ZFS Storage Appliance Kit (AK) in the API frameworks subcomponent. The vulnerability is present in versions prior to 8.7.17 and can be triggered by a low-privileged user with network access over HTTP, potentially leading to unauthorize...

Oracle Linux 6 : kernel (ELSA-2017-2863)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2863 advisory. - net l2cap: prevent stack overflow on incoming bluetooth packet Neil Horman 1490060 1490062 CVE-2017-1000251 - fs binfmtelf.c:loadelfbinary: return -EINVAL on...

CVE-2017-2863

CVE-2017-2863 affects Iceni Infix PDF Editor (Infix 7.1.5.0). A SetSize? flaw in PDF parsing can set a critical pointer at 0xFFFFFFFF, which is then used as the memset size, causing an out-of-bounds write and memory corruption. TALOS and Seebug reports confirm remote memory corruption and potenti...

CVE-2015-2863

Kaseya Virtual System Administrator (VSA) Open Redirect (CVE-2015-2863) affects VSA 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4. An attacker can redirect users to arbitrary sites to facilitate phishing via unspecified vectors. Remediation per sources: app...

Kaseya Virtual System Administrator contains multiple vulnerabilities

Overview Kaseya Virtual System Administrator VSA, versions R9 and possibly earlier, contains arbitrary file download and open redirect vulnerabilities. Description CWE-22: Improper Limitation of Pathname to a Restricted Directory 'Path Traversal' - CVE-2015-2862Kaseya VSA is an IT management...

CVE-2014-2863

CVE-2014-2863 describes multiple absolute path traversal vulnerabilities in PaperThin CommonSpot reported for versions before 7.0.2 and 8.x before 8.0.3. The flaw allows remote attackers to cause an unspecified impact by supplying a full pathname in a parameter. The connected documents corroborat...

Debian DSA-2863-1 : libtar - directory traversal

A directory traversal attack was reported against libtar, a C library for manipulating tar archives. The application does not validate the filenames inside the tar archive, allowing to extract files in arbitrary path. An attacker can craft a tar file to override files beyond the tarextractglob an...

Debian: Security Advisory (DSA-2863-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2706-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2706-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano June 10, 2013 http://www.debian.org/security/faq -...

Google Chrome Multiple Vulnerabilities-01 June13 (Linux)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvuln01jun13lin.nasl 6086 2017-05-09 09:03:30Z teissa $ Google Chrome Multiple Vulnerabilities-01 June13 Linux Authors: Arun Kallavi Copyright: Copyright c 2013...

[SECURITY] [DSA 2706-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2706-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano June 10, 2013 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2706-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-2863

CVE-2013-2863 affects Chromium/Google Chrome up to version 27.0.1453.110, where SSL socket handling is faulty, enabling remote attackers to execute arbitrary code or cause a memory corruption DoS via unspecified vectors. The issue is documented across multiple sources (NVD entry for CVE-2013-2863...

Google Chrome < 27.0.1453.110 Multiple Vulnerabilities

Binary data 801017.prm...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. VID 60bbe12c-e2c1-11e1-a8ca-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID 60bbe12c-e2c1-11e1-a8ca-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2012-2863

The PDF functionality in Google Chrome before 21.0.1180.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations...