131 matches found
[SECURITY] [DLA 1671-1] coturn security update
Package : coturn Version : 4.2.1.2-1+deb8u1 CVE ID : CVE-2018-4056 CVE-2018-4058 CVE-2018-4059 Multiple vulnerabilities were discovered in coTURN, a TURN and STUN server for VoIP. CVE-2018-4056 An SQL injection vulnerability was discovered in the coTURN administrator web portal. As the...
FreeBSD : turnserver -- multiple vulnerabilities (181beef6-2482-11e9-b4a3-00155d006b02)
Mihaly Meszaros reports : We made 4.5.1.0 release public today that fixes many vulnerabilities. It fix the following vulnerabilities : - CVE-2018-4056 - CVE-2018-4058 - CVE-2018-4059 They will be exposed very soon.. C Tenable Network Security, Inc. The descriptive text and package checks in this...
CVE-2018-4059
creationtimestamp| type| source ---|---|--- 2019-01-30 15:07:25+00:00| seen| MISP/5c51bd22-3c90-4883-b727-3fba0a021402...
Debian DSA-4373-1 : coturn - security update
Multiple vulnerabilities were discovered in coTURN, a TURN and STUN server for VoIP. - CVE-2018-4056 A SQL injection vulnerability was discovered in the coTURN administrator web portal. As the administration web interface is shared with the production, it is unfortunately not possible to easily...
turnserver -- multiple vulnerabilities
Mihály Mészáros reports: We made 4.5.1.0 release public today that fixes many vulnerabilities. It fix the following vulnerabilities: CVE-2018-4056 CVE-2018-4058 CVE-2018-4059 They will be exposed very soon...
Wavelink Emulation License Server Processing Buffer Overflow - Ver2 (CVE-2015-4059)
A buffer overflow vulnerability exists in Wavelink Emulation License Server. The vulnerability is due to a boundary error when parsing HTTP headers. By sending crafted requests to a vulnerable server, a remote unauthenticated attacker can possibly exploit this vulnerability to execute arbitrary...
Security Bulletin: In IBM InfoSphere Information Server, the Information Services Catalog interface is vulnerable to various web UI vulnerabilities (CVE-2013-3034, CVE-2013-4057, CVE-2013-4059, CVE-2012-4819)
Summary The Information Services Catalog interface of the IBM InfoSphere Information Server web console is exposed to various well known web UI vulnerabilities: phishing through frames, cacheable SSL pages, link injection, cross-site request forgery and cross-site scripting. Vulnerability Details...
CVE-2017-4059
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
Debian DSA-4059-1 : libxcursor - security update
It was discovered that libXcursor, a X cursor management library, is prone to several heap overflows when parsing malicious files. An attacker can take advantage of these flaws for arbitrary code execution, if a user is tricked into processing a specially crafted cursor file. %NASLMINLEVEL 70300 ...
CVE-2016-4059
Summary: CVE-2016-4059 is a use-after-free vulnerability in Foxit Reader and Foxit PhantomPDF before 7.3.4 on Windows, exploitable via a crafted FlateDecode stream in a PDF to achieve arbitrary code execution. The issue is part of a family of related flaws affecting multiple components of Foxit’s...
Wavelink Emulation License Server HTTP Header Processing Buffer Overflow (CVE-2015-4059)
A buffer overflow vulnerability exists in Wavelink Emulation License Server. The vulnerability is due to a boundary error when parsing HTTP headers. By sending crafted requests to a vulnerable server, a remote unauthenticated attacker can possibly exploit this vulnerability to execute arbitrary...
CVE-2015-4059
Heap-based buffer overflow in the License Server LicenseServer.exe in Wavelink Terminal Emulation TE allows remote attackers to execute arbitrary code via a large HTTP header...
CVE-2015-4059
Affected software: Wavelink Emulation License Server (LicenseServer.exe). Vulnerability type and root cause: Heap-based buffer overflow caused by unsafe handling when parsing HTTP headers, leading to a heap corruption due to an unsafe memory block copy operation. Impact and exploitability: Remote...
CVE-2015-4059
Heap-based buffer overflow in the License Server LicenseServer.exe in Wavelink Terminal Emulation TE allows remote attackers to execute arbitrary code via a large HTTP header...
CVE-2014-4059
CVE-2014-4059 refers to a remote code execution/memory corruption vulnerability in Microsoft Internet Explorer (versions 6–11). Connected advisories (ZDI-14-306, -14-308, -14-317, -14-315, -14-312, -14-316, -14-318, -14-314, -14-313) describe use-after-free flaws in various IE components (e.g., C...
CVE-2013-4059
CVE-2013-4059 affects IBM InfoSphere Information Server web interfaces across multiple versions (8.0/8.1/8.5/8.7/9.1). The issue enables content-spoofing and cross-site scripting via unspecified interfaces, potentially exposing sensitive information or unauthorized access. IBM advisories confirm ...
Slackware Advisory SSA:2008-270-01 mozilla-thunderbird
The remote host is missing an update as announced via advisory SSA:2008-270-01. OpenVAS Vulnerability Test $Id: esoftslkssa200827001.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
Slackware Advisory SSA:2008-269-01 mozilla-firefox
The remote host is missing an update as announced via advisory SSA:2008-269-01. OpenVAS Vulnerability Test $Id: esoftslkssa200826901.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
Slackware: Security Advisory (SSA:2008-269-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...