MySQL 5.6.x < 5.6.36 Multiple Vulnerabilities (April 2017 CPU) (July 2017 CPU) (Riddle)

The version of MySQL running on the remote host is 5.6.x prior to 5.6.36. It is, therefore, affected by multiple vulnerabilities : - A use-after-free error exists in the mysqlprunestmtlist function in client.c that allows an authenticated, remote attacker to cause a denial of service condition...

Updated mariadb packages fix security vulnerability

Crash in libmysqlclient.so in MariaDB 10.0.x through 10.0.29 CVE-2017-3302. Vulnerability in the MariaDB Server component of MariaDB subcomponent: Server: MyISAM. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MariaDB Server executes to...

[slackware-security] mariadb

New mariadb packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mariadb-10.0.30-i586-1slack14.2.txz: Upgraded. This update fixes security issues: Crash in libmysqlclient.so. Difficult to exploit...

Debian DSA-3809-1 : mariadb-10.0 - security update

Several issues have been discovered in the MariaDB database server. The vulnerabilities are addressed by upgrading MariaDB to the new upstream version 10.0.30. Please see the MariaDB 10.0 Release Notes for further details : %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

[SECURITY] [DSA 3809-1] mariadb-10.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3809-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 14, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3809-1] mariadb-10.0 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3809-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 14, 2017 https://www.debian.org/security/faq -...

CVE-2017-3302

Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3...

CVE-2017-3302

Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3...

CVE-2017-3302

CVE-2017-3302 describes a crash in libmysqlclient.so when the server connection is lost, affecting Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5, and MariaDB up to 5.5.54 and various 10.0/10.1/10.2 branches up to 10.2.3. The vulnerability can impact availability (partial impact per CVSS v2/v3...

CVE-2017-3302

Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3...

CVE-2017-3302

Removed by vendor...

CVE-2016-3302

CVE-2016-3302 is a Windows lock screen elevation-of-privilege vulnerability. Affected products include Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 (Gold, 1511, 1607). The issue arises when the Windows lock screen improperly loads web content, enabling a physically proximat...

Oracle: Security Advisory (ELSA-2010-0892)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3302-1 : libwmf - security update

Insufficient input sanitising in libwmf, a library to process Windows metafile data, may result in denial of service or the execution of arbitrary code if a malformed WMF file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

Debian Security Advisory DSA 3302-1 (libwmf - security update)

Insufficient input sanitising in libwmf, a library to process Windows metafile data, may result in denial of service or the execution of arbitrary code if a malformed WMF file is opened. OpenVAS Vulnerability Test $Id: deb3302.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory...

Multiple Vulnerabilities in TheCartPress WordPress plugin

Advisory ID: HTB23254 Product: TheCartPress WordPress plugin Vendor: TheCartPress team Vulnerable Versions: 1.3.9 and probably prior Tested Version: 1.3.9 Advisory Publication: April 8, 2015 without technical details Vendor Notification: April 8, 2015 Public Disclosure: April 29, 2015 Vulnerabili...

WordPress TheCartPress 1.3.9 XSS / Local File Inclusion

Advisory ID: HTB23254 Product: TheCartPress WordPress plugin Vendor: TheCartPress team Vulnerable Versions: 1.3.9 and probably prior Tested Version: 1.3.9 Advisory Publication: April 8, 2015 without technical details Vendor Notification: April 8, 2015 Public Disclosure: April 29, 2015 Vulnerabili...

WordPress Plugin TheCartPress 1.3.9 - Multiple Vulnerabilities

WordPress Plugin TheCartPress 1.3.9 - Multiple Vulnerabilities Advisory ID: HTB23254 Product: TheCartPress WordPress plugin Vendor: TheCartPress team Vulnerable Versions: 1.3.9 and probably prior Tested Version: 1.3.9 Advisory Publication: April 8, 2015 without technical details Vendor...

WordPress Plugin TheCartPress 1.3.9 - Multiple Vulnerabilities

Advisory ID: HTB23254 Product: TheCartPress WordPress plugin Vendor: TheCartPress team Vulnerable Versions: 1.3.9 and probably prior Tested Version: 1.3.9 Advisory Publication: April 8, 2015 without technical details Vendor Notification: April 8, 2015 Public Disclosure: April 29, 2015 Vulnerabili...

CVE-2014-3302

CVE-2014-3302 affects Cisco WebEx Meetings Server (1.5(.1.131) and earlier) in the user.php script. The root cause is an invalid token timer for authenticated encryption, allowing unauthenticated, remote attackers to view sensitive information via crafted URL requests. Exploitation described as u...