CVE-2019-2869

CVE-2019-2869 affects Oracle Berkeley DB Data Store. Affected versions: 12.1.6.1.23, 12.1.6.1.26, 12.1.6.1.29, 12.1.6.1.36, 12.1.6.2.23, 12.1.6.2.32. The vulnerability is described as difficult to exploit and can be exploited by an unauthenticated attacker with logon to the infrastructure where D...

Security Bulletin: IBM QRadar SIEM is vulnerable to cross-site scripting. (CVE-2016-2869)

Summary Cross-Site Scripting was found in various fields in the QRadar UI. Vulnerability Details CVE-ID: CVE-2016-2869 Description: IBM QRadar is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a...

Natus Xltek NeuroWorks

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Natus Medical, Inc. Natus Equipment: Natus Xltek NeuroWorks software Vulnerabilities: Stack-Based Buffer Overflow, Out-of-Bounds Read 2. RISK EVALUATION Successful exploitation of these...

CVE-2018-2869

The CVE-2018-2869 entry concerns Oracle E-Business Suite HR General Utilities. Affected versions are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. The vulnerability allows an unauthenticated attacker with network access via HTTP to read data from Oracle Human Resources. The d...

CVE-2017-2869

CVE-2017-2869 is a code execution vulnerability in Natus Xltek NeuroWorks 8 OpenProducer. Talos reports a stack-based buffer overflow caused by improper handling of SlowReviewLocalPath data within the KeyTree during OpenProducer processing, which can be triggered remotely by sending a crafted net...

CVE-2016-2869

CVE-2016-2869: IBM QRadar SIEM UI is vulnerable to Cross‑Site Scripting due to improper validation of user-supplied input. A remote authenticated user could inject script via crafted URL fields in QRadar UI. Affected products/versions: IBM QRadar 7.1 (before MR2 Patch 13) and 7.2 (before 7.2.7). ...

Ubuntu 14.04 LTS : OpenSSH vulnerabilities (USN-2869-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2869-1 advisory. It was discovered that the OpenSSH client experimental support for resuming connections contained multiple security issues. A malicious server could use...

CVE-2015-2869

Affected software: Total Commander FileInfo plugin (version 2.21 affected, fixed in 2.22 per TALOS report). Vulnerability type: Out‑of‑bounds read leading to denial of service and possible application termination. Root cause: Attacker-controlled fields in COFF Archive and LE structures (Archive M...

Total Commander File Info plugin vulnerable to denial of service via an out-of-bounds read

Overview Total Commander's File Info plugin version 2.21 attempts an out-of-bounds read when reading a file carefully crafted by an attacker. Description CWE-125: Out-of-bounds Read - CVE-2015-2869An attacker that can control the contents of certain file types may be able to cause an out-of-bound...

openSUSE Security Update : chromium (openSUSE-SU-2012:1215-1)

Chromium was updated to 21.0.1180.88 to fix various bugs and security issues. Security fixes and rewards : Please see the Chromium security pagefor more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix. - $500 121347 Medium...

CVE-2014-2869

The provided data confirms CVE-2014-2869 affects PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3, where remote attackers can disclose sensitive information by requesting unspecified URIs. Impact details stated include exposure of pathname, SQL server information, e-mail addresses, and IP a...

Fedora Update for easy-rsa FEDORA-2014-2869

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2724-1] chromium-browser security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2724-1 [email protected] http://www.debian.org/security/ Michael Gilbert July 17, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2724-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2724-1 [email protected] http://www.debian.org/security/ Michael Gilbert July 17, 2013 http://www.debian.org/security/faq -...

Google Chrome < 28.0.1500.71 Multiple Vulnerabilities

Binary data 6920.pasl...

CVE-2013-2869

Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service out-of-bounds read via a crafted JPEG2000 image...

CVE-2013-2869

Chromium/Chrome vulnerability CVE-2013-2869: out-of-bounds read in JPEG2000 image handling can be exploited to cause a remote denial of service. Affected versions include Chrome/Chromium up to 28.0.1500.71. Debian, Gentoo, and other advisories document the issue and state the fix is in Chromium 2...

Stable Channel Update

Update: We are separately updating users to Flash Player 11.8.800.97 via our component updater. The Stable channel has been updated to 28.0.1500.71 for Windows, Macintosh and Chrome Frame platforms. Security fixes and rewards: Please see the Chromium security page for more information. Note that...

Fedora 7 : epiphany-2.18.1-3.fc7 (2007-0008)

Updated firefox packages that fix several security bugs are now available for Fedora Core 7. Users of epiphany are advised to upgrade to these erratum packages which have been rebuilt against a patched firefox which is not vulnerable to these issues. Note that Tenable Network Security has extract...

Slackware: Security Advisory (SSA:2007-152-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...