142 matches found
OPENSUSE-SU-2017:2537-1 Security update for freexl
This update for freexl to version 1.0.4 fixes several issues. These security issues were fixed: - CVE-2017-2924: Prevent heap-based buffer overflow in the readlegacybiff function bsc1058433. - CVE-2017-2923: Prevent heap-based buffer overflow in the readbiffnextrecord function bsc1058431...
OPENSUSE-SU-2017:2539-1 Security update for freexl
This update for freexl to version 1.0.4 fixes several issues. These security issues were fixed: - CVE-2017-2924: Prevent heap-based buffer overflow in the readlegacybiff function bsc1058433. - CVE-2017-2923: Prevent heap-based buffer overflow in the readbiffnextrecord function bsc1058431...
Debian DSA-3976-1 : freexl - security update
Marcin 'Icewall' Noga of Cisco Talos discovered two vulnerabilities in freexl, a library to read Microsoft Excel spreadsheets, which might result in denial of service or the execution of arbitrary code if a malformed Excel file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Debian DLA-1098-1 : freexl security update
The Cisco Talos team reported two sensitive security issues affecting FreeXL-1.0.3 and any previous version. CVE-2017-2923 An exploitable heap based buffer overflow vulnerability exists in the readbiffnextrecord function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption...
[SECURITY] [DSA 3976-1] freexl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3976-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 17, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3976-1] freexl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3976-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 17, 2017 https://www.debian.org/security/faq -...
[SECURITY] [DLA 1098-1] freexl security update
Package : freexl Version : 1.0.0b-1+deb7u4 CVE ID : CVE-2017-2923 CVE-2017-2924 Debian Bug : 875690 875691 The Cisco Talos team reported two sensitive security issues affecting FreeXL-1.0.3 and any previous version. CVE-2017-2923 An exploitable heap based buffer overflow vulnerability exists in t...
Debian: Security Advisory (DSA-3976-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-2923
CVE-2016-2923 affects IBM WebSphere Application Server Liberty (JAX-RS API cookies) where HTTPOnly flag is not set, enabling remote attackers to read cookies and potentially access sensitive data. Affected: WebSphere Application Server 8.5.x (8.5–8.5.5.9) and Liberty prior to 16.0.0.2. CVSSv3.0 v...
Ubuntu 14.04 LTS : BeanShell vulnerability (USN-2923-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2923-1 advisory. Alvaro Muoz and Christian Schneider discovered that BeanShell incorrectly handled deserialization. A remote attacker could possibly use this issue to execute...
USN-2923-1 bsh vulnerability
Alvaro Muñoz and Christian Schneider discovered that BeanShell incorrectly handled deserialization. A remote attacker could possibly use this issue to execute arbitrary code...
Fedora Update for csync2 FEDORA-2015-2923
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for librsync FEDORA-2015-2923
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for duplicity FEDORA-2015-2923
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 3175-2] kfreebsd-9 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3175-2 [email protected] http://www.debian.org/security/ Alessandro Ghedini May 18, 2015 http://www.debian.org/security/faq -...
FreeBSD Security Advisory FreeBSD-SA-15:09.ipv6
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-15:09.ipv6 Security Advisory The FreeBSD Project Topic: Denial of Service with IPv6 Router Advertisements Category: core Module: ipv6 Announced: 2015-04-07...
Joomla Component com_youtube SQL Injection (CVE-2010-2923)
An SQL injection vulnerability has been reported in Prasanna Com Youtube. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
openSUSE Security Update : chromium (openSUSE-SU-2013:1556-1)
Update to Chromium 30.0.1599.66 : - Easier searching by image - A number of new apps/extension APIs - Lots of under the hood changes for stability and performance - Security fixes : + CVE-2013-2906: Races in Web Audio + CVE-2013-2907: Out of bounds read in Window.prototype object + CVE-2013-2908:...
Debian DSA-2923-1 : openjdk-7 - security update
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...
