CVE-2019-3460

A heap data infoleak in multiple locations including L2CAPPARSECONFRSP was found in the Linux kernel before 5.1-rc1...

Ubuntu 16.04 LTS : WebKitGTK+ vulnerabilities (USN-3460-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3460-1 advisory. A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, ...

Important: Red Hat Security Advisory: rh-mysql57-mysql security and bug fix update

An update for rh-mysql57-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2017-3460

CVE-2017-3460 affects Oracle MySQL Server (Server: Audit Plug-in). Affected: MySQL 5.7.17 and earlier. Issue: high-privilege attacker can authenticate via network and cause a hang or complete DoS of MySQL Server. Mitigation: apply vendor-supplied fixes by upgrading to a version with the CP update...

CVE-2017-3460

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Plug-in. Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Oracle Mysql Security Updates (apr2017-3236618) 05 - Linux

Oracle MySQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; ifdescription...

CVE-2016-3460

CVE-2016-3460 affects Oracle PeopleSoft Products 9.2, specifically the PeopleSoft Enterprise HCM component’s ePerformance subcomponent. The vulnerability is described as unspecified but allows a remote authenticated user to read, update, insert, or delete data, impacting confidentiality and integ...

Debian Security Advisory DSA 3460-1 (privoxy - security update)

It was discovered that privoxy, a web proxy with advanced filtering capabilities, contained invalid reads that could enable a remote attacker to crash the application, thus causing a Denial of Service. OpenVAS Vulnerability Test $Id: deb3460.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generate...

Debian DSA-3460-1 : privoxy - security update

It was discovered that privoxy, a web proxy with advanced filtering capabilities, contained invalid reads that could enable a remote attacker to crash the application, thus causing a Denial of Service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Directory traversal

Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in NetIQ Security Manager through 6.5.4 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3460...

CVE-2014-3460

Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted pathname...

CVE-2014-3460

Summary (CVE-2014-3460): A directory traversal vulnerability in the DumpToFile method of the NQMcsVarSet ActiveX control (Agent Manager component of NetIQ Sentinel) allows remote attackers to create arbitrary files and potentially execute code via a crafted pathname. Affected products/versions in...

Cisco Unified Communications Manager UDP Memory Leak DoS (CSCub85597)

According to its self-reported version, the remote Cisco Unified Communications Manager CUCM device insufficiently limits the rate of traffic on certain UDP ports, allowing a remote attacker to cause a denial of service condition by sending UDP packets at a high rate. %NASLMINLEVEL 70300 C Tenabl...

CVE-2013-3460

CVE-2013-3460 affects Cisco Unified Communications Manager (CUCM) versions 8.5.x before 8.5(1)su6, 8.6.x before 8.6(2a)su3, and 9.x before 9.1(1). It describes a memory leak vulnerability that lets remote attackers cause a denial of service (service disruption) by sending a high rate of UDP packe...

Oracle Linux 3 : libtiff (ELSA-2006-0603)

From Red Hat Security Advisory 2006:0603 : Updated libtiff packages that fix several security flaws are now available for Red Hat Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. The libtiff package contains a library of...

QuickTime < 7.7.2 Multiple Vulnerabilities

Binary data 6489.prm...

Apple Mac OS X PNG文件MediaVideo处理缓冲区溢出漏洞

BUGTRAQ ID: 51814 CVE ID: CVE-2011-3460 Mac OS是一套运行于苹果的Macintosh系列电脑上的操作系统。 Apple Mac OS X在为.png格式编码的视频解码分配空间时会触发特定的漏洞，计算surface的空间时，应用会信任MediaVideo标头中的比特位深。在解码过程中，应用会在surface的边界之外写入，在实现上存在缓冲区溢出漏洞，成功利用后可允许攻击者执行任意代码。受影响版本：Mac OS X 10.6.8 、Mac OS X Server 10.6.8、Mac OS X 10.7-10.7.2、Mac OS X Server...

Mac OS X Multiple Vulnerabilities (2012-001)

This host is missing an important security update according to Mac OS X Update/Mac OS X Security Update 2012-001. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Mac OS X Multiple Vulnerabilities (Security Update 2012-001) (BEAST)

The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-001 applied. This update contains multiple security-related fixes for the following components : - Apache - ATS - ColorSync - CoreAudio - CoreMedia - CoreText - curl - Data Security - dovecot - filecmds ...

Axigen Webmail Directory Traversal Vulnerability

Axigen Webmail is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. Axigen Webmail 7.4.1 is vulnerable; other versions may be...