Debian Security Advisory DSA 3546-1 (optipng - security update)

Hans Jerry Illikainen discovered that missing input sanitising in the BMP processing code of the optipng PNG optimiser may result in denial of service or the execution of arbitrary code if a malformed file is processed. OpenVAS Vulnerability Test $Id: deb3546.nasl 6608 2017-07-07 12:05:05Z cfisch...

Gentoo Security Advisory GLSA 201408-11

Gentoo Linux Local Security Checks GLSA 201408-11 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

CVE-2015-3981

SAP NetWeaver RFC SDK allows attackers to obtain sensitive information via unspecified vectors, aka SAP Security Note 2084037...

CVE-2015-3981

SAP NetWeaver RFC SDK is affected by an information-disclosure vulnerability (CVE-2015-3981). Connected sources indicate that remote attackers may obtain sensitive information via unspecified vectors, referencing SAP Security Note 2084037. The exact vulnerable component is the RFC SDK within SAP ...

PHP 5.6.0 Multiple Vulnerabilities

According to its banner, the version of PHP installed on the remote host is a development version of 5.6.0. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not attempted to exploit this issue but has instead relied only on application's self-reported version number...

Slackware 14.0 / 14.1 / current : php (SSA:2014-192-01)

New php packages are available for Slackware 14.0, 14.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2014-192-01. The text itself is copyright C...

[slackware-security] php

New php packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/php-5.4.30-i486-1slack14.1.txz: Upgraded. This update fixes bugs and security issues. For more information, see:...

CVE-2014-3981

CVE-2014-3981 affects PHP 5.5.13 and earlier. The vulnerability arises from the acinclude.m4 usage in the configure script, enabling a local user to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file. Impact is local privilege-related, enabling file tampering. The provi...

CVE-2013-3981

The CVE-2013-3981 entry concerns IBM Sametime Meeting Server (versions 8.x up to 8.5.2.1 and 9.x up to 9.0.0.1). The vulnerability allows remote attackers to download avatar photos of arbitrary users via unspecified vectors. The available documents do not specify the underlying root cause, exploi...

Fedora Update for bugzilla FEDORA-2013-2845

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for bugzilla FEDORA-2012-18210

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for bugzilla FEDORA-2012-18224

Check for the Version of bugzilla OpenVAS Vulnerability Test Fedora Update for bugzilla FEDORA-2012-18224 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for bugzilla FEDORA-2012-13171

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for bugzilla FEDORA-2012-13163

Check for the Version of bugzilla OpenVAS Vulnerability Test Fedora Update for bugzilla FEDORA-2012-13163 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 16 : bugzilla-4.0.8-1.fc16 (2012-13171)

This release fixes an LDAP injection problem the username entered by a user was not escaped before being used. This is CVE number CVE-2012-3981. See the security advisory for more details. http://www.bugzilla.org/security/3.6.10/ Note that Tenable Network Security has extracted the preceding...

Fedora 17 : bugzilla-4.0.8-1.fc17 (2012-13163)

This release fixes an LDAP injection problem the username entered by a user was not escaped before being used. This is CVE number CVE-2012-3981. See the security advisory for more details. http://www.bugzilla.org/security/3.6.10/ Note that Tenable Network Security has extracted the preceding...

CVE-2012-3981

Bugzilla contains an LDAP username handling flaw in Auth/Verify/LDAP.pm that does not restrict characters, potentially allowing remote attackers to inject data into an LDAP directory via crafted login attempts. Affected versions include Bugzilla 2.x/3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8...

CVE-2011-3981

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2011-3981

CVE-2011-3981 affects WordPress AllWebMenus Plugin 1.1.3. The AllWebMenus plugin is vulnerable to a PHP remote file inclusion via the abspath parameter in actions.php, due to insufficient input sanitization, allowing attempted arbitrary PHP code execution. This aligns with multiple sources (NVD/N...

CVE-2011-3981

PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...