161 matches found
SUSE SLES12 Security Update : docker (SUSE-SU-2015:0984-1)
The Linux container runtime environment Docker was updated to version 1.6.2 to fix several security and non-security issues. - Security : - Fix read/write /proc paths. CVE-2015-3630 - Prohibit VOLUME /proc and VOLUME /. CVE-2015-3631 - Fix opening of file-descriptor 1. CVE-2015-3627 - Fix symlink...
openSUSE Security Update : docker (openSUSE-2015-365)
docker was updated to version 1.6.1 to fix several security and non-security issues. - Updated to version 1.6.1 2015-05-07 bnc930235 - Security - Fix read/write /proc paths CVE-2015-3630 - Prohibit VOLUME /proc and VOLUME / CVE-2015-3631 - Fix opening of file-descriptor 1 CVE-2015-3627 - Fix...
CVE-2015-3630
Docker Engine prior to 1.6.1 is vulnerable to CVE-2015-3630 due to weak permissions on /proc paths (/proc/asound, /proc/timer_stats, /proc/latency_stats, /proc/fs). This lets a local attacker modify the host, access sensitive information, and, via a crafted image, enable protocol downgrade attack...
Moodle Spellcheck Remote Command Execution (CVE-2013-3630)
A remote command execution vulnerability has been reported in Moodle Spellcheck. The vulnerability is due to insufficient validation of the Spellcheck mechanism. A remote attacker can exploit this vulnerability to execute a crafted file which will allow running arbitrary commands in the context o...
openSUSE Security Update : acroread (openSUSE-SU-2010:0706-1)
Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-2883, CVE-2010-2884, CVE-2010-2887, CVE-2010-2889, CVE-2010-2890, CVE-2010-3619, CVE-2010-3620, CVE-2010-3621, CVE-2010-3622, CVE-2010-3623, CVE-2010-3624, CVE-2010-3625, CVE-2010-3626,...
Fedora Update for moodle FEDORA-2013-21354
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for moodle FEDORA-2013-21397
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : moodle-2.4.7-1.fc19 (2013-21397)
Latest upstreams, multiple security fixes. Name: CVE-2013-6780 URL: https://vulners.com/cve/CVE-2013-6780 Assigned: 20131112 Reference: https://yuilibrary.com/support/20131111-vulnerability/ Cross-site scripting XSS vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 throu...
CVE-2013-3630
Moodle through 2.5.2 allows remote authenticated administrators to execute arbitrary programs by configuring the aspell pathname and then triggering a spell-check operation within the TinyMCE editor...
CVE-2013-3630
Moodle up to version 2.5.2 contains a remote code execution vulnerability: remote authenticated administrators can configure the aspell path and trigger spell-check in TinyMCE to execute arbitrary commands. The root cause is misconfiguration of the spellchecking mechanism (aspell path), enabling ...
CVE-2013-3630
creationtimestamp| type| source ---|---|--- 2013-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29324 2021-10-11 22:36:30+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/moodlespellingbinaryrce.rb 2025-02-06 03:13:41+00:00|...
Oracle Linux 4 : wireshark (ELSA-2006-0726 / ELSA-2006-0658 / ELSA-2006-0602)
New Wireshark packages that fix various security vulnerabilities are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Users of Wireshark should upgrade to these updated packag...
CVE-2012-3630
CVE-2012-3630 pertains to WebKit used by Apple Safari prior to version 6.0. The issue allows remote attackers to cause memory corruption and potentially execute arbitrary code or trigger a denial of service via a crafted website. The connected documents do not provide explicit exploitation detail...
Fedora 15 : hardlink-1.0-12.fc15 (2011-14753)
fix possible buffer overflows, integer overflows CVE-2011-3630 CVE-2011-3631 CVE-2011-3632 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
Fedora 16 : hardlink-1.0-12.fc16 (2011-14727)
fix possible buffer overflows, integer overflows CVE-2011-3630 CVE-2011-3631 CVE-2011-3632 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 7181)
Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. CVE-2010-2883 / CVE-2010-2884 / CVE-2010-2887 / CVE-2010-2889 / CVE-2010-2890 / CVE-2010-3619 / CVE-2010-3620 / CVE-2010-3621 / CVE-2010-3622 / CVE-2010-3623 / CVE-2010-3624 / CVE-2010-3625 / CVE-2010-362...
SuSE 11 / 11.1 Security Update : Acrobat Reader (SAT Patch Numbers 3268 / 3270)
Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. CVE-2010-2883 / CVE-2010-2884 / CVE-2010-2887 / CVE-2010-2889 / CVE-2010-2890 / CVE-2010-3619 / CVE-2010-3620 / CVE-2010-3621 / CVE-2010-3622 / CVE-2010-3623 / CVE-2010-3624 / CVE-2010-3625 / CVE-2010-362...
SuSE 11 / 11.1 Security Update : acroread_ja (SAT Patch Numbers 3272 / 3273)
Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. CVE-2010-2883 / CVE-2010-2884 / CVE-2010-2887 / CVE-2010-2889 / CVE-2010-2890 / CVE-2010-3619 / CVE-2010-3620 / CVE-2010-3621 / CVE-2010-3622 / CVE-2010-3623 / CVE-2010-3624 / CVE-2010-3625 / CVE-2010-362...
openSUSE Security Update : acroread (openSUSE-SU-2010:0706-1)
Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-2883, CVE-2010-2884, CVE-2010-2887, CVE-2010-2889, CVE-2010-2890, CVE-2010-3619, CVE-2010-3620, CVE-2010-3621, CVE-2010-3622, CVE-2010-3623, CVE-2010-3624, CVE-2010-3625, CVE-2010-3626,...
openSUSE Security Update : acroread (openSUSE-SU-2010:0706-1)
Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code CVE-2010-2883, CVE-2010-2884, CVE-2010-2887, CVE-2010-2889, CVE-2010-2890, CVE-2010-3619, CVE-2010-3620, CVE-2010-3621, CVE-2010-3622, CVE-2010-3623, CVE-2010-3624, CVE-2010-3625, CVE-2010-3626,...