Oracle MySQL Server 8.0 <= 8.0.17 Security Update (cpuoct2019) - Linux

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

CVE-2019-2963 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2019-2963

CVE-2019-2963 affects Oracle MySQL Server (InnoDB). According to the supplied connected advisories, vulnerable versions are MySQL 8.0.17 and earlier. The vulnerability enables high-privilege, network-access attackers to cause the MySQL Server to hang or crash (denial of service). The documents do...

CVE-2018-2963

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x and 16.x. Easily exploitable vulnerability allows low privileged attacker with network acce...

CVE-2018-2963

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x and 16.x. Easily exploitable vulnerability allows low privileged attacker with network acce...

CVE-2018-2963

CVE-2018-2963 affects Oracle Primavera P6 Enterprise Project Portfolio Management (P6 EPPM) Web Access; affected versions are 8.4, 15.x and 16.x. The vulnerability enables a low-privileged, network-remote attacker (via HTTP) to read a subset of data from P6 EPPM. The available documents do not sp...

CVE-2018-2963

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x and 16.x. Easily exploitable vulnerability allows low privileged attacker with network acce...

Adobe Reader < 11.0.19 / 15.006.30279 / 15.023.20053 Multiple Vulnerabilities (APSB17-01) (macOS)

The version of Adobe Reader installed on the remote macOS or Mac OS X host is prior to 11.0.19, 15.006.30279, or 15.023.20053. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist due to improper validation of unspecified input. An unauthenticated,...

CVE-2017-2963

CVE-2017-2963: Adobe Acrobat Reader/Acrobat prior to versions 15.020.20042, 15.006.30244, and 11.0.18 contain a memory corruption vulnerability in the image conversion engine related to TIFF color profile handling. Successful exploitation could lead to arbitrary code execution. Connected sources ...

Oracle Linux 5 : xen (ELSA-2016-2963)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-2963 advisory. 3.0.3-148.el511 - xen-qemu-ioport-array-overflow.patch bz1401521 - Resolves: bz1401521 CVE-2016-9637 xsa199 xen: qemu ioport array overflow XSA-199 rhel-5.11.z...

RHEL 5 : xen (RHSA-2016:2963)

An update for xen is now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

CVE-2016-2963

Cross-site request forgery CSRF vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2016-2963

Cross-site request forgery CSRF vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2016-2963

IBM BigFix Remote Control is affected by a CSRF vulnerability (CVE-2016-2963) affecting versions up to 9.1.3 (earlier listings also cite 9.1.2 and older). The issue allows an attacker to hijack the authenticated user’s session by issuing requests that insert XSS sequences, enabling cross-site req...

Ubuntu 16.04 LTS : OpenJDK 8 vulnerabilities (USN-2963-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2963-1 advisory. Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploi...

CVE-2015-2963

The thoughtbot paperclip gem before 4.2.2 for Ruby does not consider the content-type value during media-type validation, which allows remote attackers to upload HTML documents and conduct cross-site scripting XSS attacks via a spoofed value, as demonstrated by image/jpeg...

CVE-2015-2963

CVE-2015-2963 affects the thoughtbot Paperclip gem for Ruby pre‑4.2.2. The vulnerability arises because media-type validation does not consider the content-type, allowing remote attackers to upload HTML documents and trigger cross-site scripting (XSS) via spoofed values (e.g., image/jpeg). Impact...

CVE-2014-2963

CVE-2014-2963 affects Liferay Portal 6.1.2 CE GA3, 6.1.X EE, and 6.2.X EE. The vulnerability is a persistent cross-site scripting (XSS) in group/control_panel/manage, exploitable via the parameters _2_firstName, _2_lastName, or _2_middleName in the “my account area.” Impact described includes inf...

Liferay Portal PCE contains multiple cross-site scripting vulnerabilities

Overview Liferay Portal versions 6.1.2 CE GA3, 6.1.X EE, 6.2.X EE, Master contain multiple cross-site scripting vulnerabilities Description CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' - CVE-2014-2963Liferay is affected by a Persistent Cross Site...

Debian DSA-2963-1 : lucene-solr - security update

Multiple vulnerabilities were found in Solr, an open source enterprise search server based on Lucene, resulting in information disclosure or code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...