Debian DLA-1206-1 : tiff security update

In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2pwritepdf function in tools/tiff2pdf.c. This heap overflow could lead to different damages. For example, a crafted TIFF document can lead to an out-of-bounds read in TIFFCleanup, an invalid free in TIFFClose or t2pfree, memory...

Palo Alto Networks Global Protect Client Local Elevation of Privilege Vulnerability

Palo Alto Networks GlobalProtect is a set of network protection software from Palo Alto Networks. Palo Alto Networks GlobalProtect agent is a client of Palo Alto Networks GlobalProtect, which provides firewall monitoring and threat prevention. A local extraction vulnerability exists in Palo Alto...

openSUSE Security Update : redis (openSUSE-2017-1258)

This update for redis to version 4.0.2 fixes the following issues : - CVE-2016-8339: CONFIG SET client-output-buffer-limit Code Execution Vulnerability boo1002351 The following upstream changes are included : - SLOWLOG now logs the offending client name and address - The modules native data types...

Redis <= 4.0.2 Buffer Overflow Vulnerability

Redis is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:redis:redis"; ifdescription...

CVE-2017-15047

The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service out-of-bounds array index and application crash or possibly have unspecified other impact by leveraging "limited access to the machine."...

CVE-2017-15047

The clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of service out-of-bounds array index and application crash or possibly have unspecified other impact by leveraging "limited access to the machine."...

JVN#67954465: Installer of Photo Collection PC Software provided by NTT DOCOMO, INC. may insecurely load Dynamic Link Libraries and invoke executable files

Photo Collection PC Software provided by NTT DOCOMO, INC. contains an issue with the search paths for DLL/executable files, which may lead to insecurely loading Dynamic Link Libraries and invoking executable files CWE-427. Impact This vulnerability can be exploited when the following condition is...

AppointmentBookingPro,4.0.1,SQL Injection

AppointmentBookingPro, 4.0.1, SQL Injection Resolution: update to 4.0.2 RC2 Update notice: https://appointmentbookingpro.com/support2/an2/17169-joomla-vel.html...

CVE-2016-3055

IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

Xxe

IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

CVE-2016-3055

IBM FileNet Workplace 4.0.2 before 4.0.2.14 LA012 allows remote authenticated users to read arbitrary files or cause a denial of service memory consumption via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

IBM FileNet Workplace Cross-Site Scripting Vulnerability

IBM FileNet Workplace is IBM's out-of-the-box, Web-based application for end users related to enterprise content management. A cross-site scripting vulnerability exists in IBM FileNet Workplace version 4.0.2 that could allow a remote, authenticated user to inject arbitrary web script or HTML via ...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM FileNet Workplace 4.0.2 allows remote authenticated users to inject arbitrary web script or HTML by uploading a file...

pidgin-otr denial of service vulnerability

pidgin is a set of free and easy to use chat client program. pidgin-otr is one of the plug-ins used to implement message logging . A denial of service vulnerability exists in pidgin-otr prior to version 4.0.2-1. A remote attacker can exploit this vulnerability to cause a denial of service...

SOLIDserver <= 5.0.4 - Local File Inclusion

Exploit for php platform in category web applications Title: SOLIDserver =5.0.4 - Local File Inclusion Vunerability Author: Saeed reza Zamanian penetrationtest @ Linkedin Product: SOLIDserver Tested Version: : 5.0.4 and 4.0.2 Vendor: efficient IP http://www.efficientip.com Google Dork: SOLIDserve...

Liga Manager Online 4.0.2 Cross Site Scripting

Exploit Title : LMO 4.0.2 Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.liga-manager-online.de/homepage/ Google Dork : "LMO 4.0.2" inurl:"st=" Date: 2016/01/28 Version = 4.0.2 PoC: st=XSS Payload = 'PersianHack Team Demo :...

RealtyScript 4.0.2 Cross Site Request Forgery / Cross Site Scripting

RealtyScript v4.0.2 Multiple CSRF And Persistent XSS Vulnerabilities Vendor: Next Click Ventures Product web page: http://www.realtyscript.com Affected version: 4.0.2 Summary: RealtyScript is award-winning real estate software that makes it effortless for a real estate agent, office, or...

MemHT Portal 4.0.2 Persistent XSS Exploit

Stored XSS in statistics page. Made with changged user referer. Usage Info All information in source code. / Stored XSS for MemHT Portal 4.0.2 Manual: - Register on target site - Grab login cookie loginuser=idloginHashpasswordHash - Compile C source and run it xNet library is needed - Enter targe...

Fedora 22 : kernel-4.0.2-300.fc22 (2015-7784)

The 4.0.2 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

pidgin-otr -- use after free

Hanno Bock reports: The pidgin-otr plugin version 4.0.2 fixes a heap use after free error. The bug is triggered when a user tries to authenticate a buddy and happens in the function createsmpdialog...