SUSE SLED12 Security Update : flash-player (SUSE-SU-2017:0108-1)

This update to Adobe Flash 24.0.0.194 fixes the following vulnerabilities advised under APSB17-02 : - security bypass vulnerability that could lead to information disclosure CVE-2017-2938 - use-after-free vulnerabilities that could lead to code execution CVE-2017-2932, CVE-2017-2936, CVE-2017-293...

CVE-2017-2933

CVE-2017-2933 is an Adobe Flash Player vulnerability (versions up to 24.0.0.186 and earlier) described as a heap overflow in the texture compression path. The issue could lead to arbitrary code execution on affected hosts. Public advisories and vendor-related bulletins indicate the fix is to upgr...

CVE-2017-2933

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability related to texture compression. Successful exploitation could lead to arbitrary code execution...

January 2017 Adobe Flash Security Update

This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB17-02: CVE-2017-2925, CVE-2017-2926, CVE-2017-2927, CVE-2017-2928, CVE-2017-2930, CVE-2017-2931, CVE-2017-2932, CVE-2017-2933, CVE-2017-2934, CVE-2017-2935, CVE-2017-2936, CVE-2017-293...

CVE-2016-2933

CVE-2016-2933 : Directory traversal in IBM BigFix Remote Control before 9.1.3 lets remote authenticated administrators read arbitrary files via a crafted request. Affected product: IBM BigFix Remote Control; vulnerable component: web service/file handling that processes crafted requests; root cau...

CVE-2016-2933

Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary files via a crafted request...

Ubuntu 14.04 LTS : Exim vulnerabilities (USN-2933-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2933-1 advisory. It was discovered that Exim incorrectly filtered environment variables when used with the perlstartup configuration option. If the perlstartup option was...

MediaWiki < 1.19.24 / 1.23.9 / 1.24.2 Multiple Vulnerabilities

According to its version number, the MediaWiki application running on the remote host is affected by the following vulnerabilities : - An input validation error exists related to handling API errors that allows reflected cross-site scripting attacks. CVE-2014-9714, CVE-2015-2941 - An input...

[ MDVSA-2015:200 ] mediawiki

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:200 http://www.mandriva.com/en/support/security/ Package : mediawiki Date : April 10, 2015 Affected: Business Server 1.0 Problem Description: Updated mediawiki packages fix security vulnerabilities: In...

CVE-2015-2933

Cross-site scripting XSS vulnerability in the Html class in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via a LanguageConverter substitution string when using a language variant...

CVE-2015-2933

Cross-site scripting XSS vulnerability in the Html class in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via a LanguageConverter substitution string when using a language variant...

CVE-2015-2933

CVE-2015-2933 describes an XSS vulnerability in the MediaWiki Html class when using a language variant, enabling remote attackers to inject arbitrary script/HTML via a LanguageConverter substitution string. Affected are MediaWiki versions before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24...

CVE-2015-2933

Cross-site scripting XSS vulnerability in the Html class in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via a LanguageConverter substitution string when using a language variant...

Debian Security Advisory DSA 2933-1 (qemu-kvm - security update)

Several vulnerabilities were discovered in qemu-kvm, a full virtualization solution on x86 hardware. CVE-2013-4344 Buffer overflow in the SCSI implementation in QEMU, when a SCSI controller has more than 256 attached devices, allows local users to gain privileges via a small transfer buffer in a...

CVE-2014-2933

Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote attackers to access arbitrary directories via a crafted pathname...

CVE-2014-2933

CVE-2014-2933 is a directory traversal vulnerability affecting Caldera 9.20 via the /dirmng/index.php script. The exposed flaw arises from improper limitation of a pathname to a restricted directory, allowing remote unauthenticated attackers to access arbitrary directories on the server. Public r...

CVE-2014-2933

Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote attackers to access arbitrary directories via a crafted pathname...

CVE-2013-2933

Unspecified vulnerability in Citrix CloudPortal Services Manager aka Cortex 10.0 before Cumulative Update 3 has unknown impact and attack vectors, a different vulnerability than other CVEs listed in CTX137162...

CVE-2013-2933

Technical details about CVE-2013-2933 are not provided in the supplied documents; no affected versions, root cause, or remediation are disclosed. Monitor for updates from cited sources.

Oracle Linux 3 : kdebase (ELSA-2006-0576)

From Red Hat Security Advisory 2006:0576 : Updated kdebase packages that resolve a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop...