CVE-2016-3745

Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides an AudioEffect reply, as demonstrated by obtaining Signature or SignatureOrSystem...

CVE-2016-3745

CVE-2016-3745 describes multiple buffer overflows in Android’s Mediaserver that enable privilege escalation via a crafted application passing an AudioEffect reply, allowing access to Signature or SignatureOrSystem. The issue affects Android 4.x up to 4.4.3 and versions 5.0.x up to 5.0.1, as well ...

Fedora Update for webkitgtk FEDORA-2016-9

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2016-0116)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : webkitgtk-2.4.10-1.fc24 (2016-a4fcb02d6b)

This update addresses the following vulnerabilities : - CVE-2015-1120 https://vulners.com/cve/CVE-2015-1120 - CVE-2015-1076 https://vulners.com/cve/CVE-2015-1076 - CVE-2015-1071 https://vulners.com/cve/CVE-2015-1071 - CVE-2015-1081 https://vulners.com/cve/CVE-2015-1081 - CVE-2015-1122...

Fedora 24 : webkitgtk3-2.4.10-1.fc24 (2016-fde7ffcb77)

This update addresses the following vulnerabilities : - CVE-2015-1120 https://vulners.com/cve/CVE-2015-1120 - CVE-2015-1076 https://vulners.com/cve/CVE-2015-1076 - CVE-2015-1071 https://vulners.com/cve/CVE-2015-1071 - CVE-2015-1081 https://vulners.com/cve/CVE-2015-1081 - CVE-2015-1122...

Fedora 23 : webkitgtk-2.4.10-1.fc23 (2016-5d6d75dbea)

This update addresses the following vulnerabilities : - CVE-2015-1120 https://vulners.com/cve/CVE-2015-1120 - CVE-2015-1076 https://vulners.com/cve/CVE-2015-1076 - CVE-2015-1071 https://vulners.com/cve/CVE-2015-1071 - CVE-2015-1081 https://vulners.com/cve/CVE-2015-1081 - CVE-2015-1122...

Fedora Update for webkitgtk FEDORA-2016-5

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for webkitgtk3 FEDORA-2016-1

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 23 : webkitgtk3-2.4.10-1.fc23 (2016-1a7f7ffb58)

This update addresses the following vulnerabilities : - CVE-2015-1120 https://vulners.com/cve/CVE-2015-1120 - CVE-2015-1076 https://vulners.com/cve/CVE-2015-1076 - CVE-2015-1071 https://vulners.com/cve/CVE-2015-1071 - CVE-2015-1081 https://vulners.com/cve/CVE-2015-1081 - CVE-2015-1122...

Apple Safari Multiple Vulnerabilities-01 (Sep 2015) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

CVE-2015-3745

CVE-2015-3745 involves WebKit used in Apple iOS before 8.4.1 and Safari before 6.2.8, and versions 7.x before 7.1.8, 8.x before 8.0.8. The vulnerability allows a remote attacker to run arbitrary code or cause a denial of service through a crafted web site, via memory corruption and application cr...

CVE-2015-3745

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVE...

Oracle Solaris Critical Patch Update : july2013_SRU6_6

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Libraries/Libc. Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability...

CVE-2013-3745

The CVE-2013-3745 entry corresponds to a vulnerability in the Solaris Libraries/Libc component affecting Oracle Solaris 8, 9, 10 and 11. The connected Nessus plugin details specify that this is a local, easily exploited issue that can cause a hang or a frequent crash (complete DOS) on affected So...

Oracle Linux 4 : kernel (ELSA-2006-0617 / ELSA-2006-0689)

Updated kernel packages that fix security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These new kernel packages contain fixes for the security...

CVE-2012-3745

CVE-2012-3745 affects iOS before 6, in Telephony. Off-by-one error in the handling of SMS user-data headers can allow a remote attacker to trigger a denial of service via a crafted SMS, potentially causing a buffer overflow and connectivity outage. Connected documentation references the same CVE ...

CVE-2011-3745

CVE-2011-3745 affects HycusCMS 1.0.3. Affected component/file: templates/hycus_template/template.php. The issue is an information disclosure where a direct request to a PHP file reveals the installation path in an error message. No exploitation details are provided in the connected documents. No ...

CVE-2009-3745

CVE-2009-3745 is a cross-site scripting (XSS) vulnerability affecting IBM Rational AppScan Enterprise Edition 5.5.0.2, exposed via the help pages. The issue arises from improper handling of user-supplied input in the query string, allowing remote attackers to inject arbitrary web script or HTML. ...

Fedora Update for drupal FEDORA-2008-7626

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...