72 matches found
CVE-2016-4376
CVE-2016-4376 affects HPE StoreFabric B-series switches running HPE FOS before 7.4.1d and 8.x before 8.0.1. The issue is an information disclosure vulnerability that allows remote attackers to obtain sensitive information via unspecified vectors. Affected component is the StoreFabric B-series swi...
Gentoo Security Advisory GLSA 201310-19
Gentoo Linux Local Security Checks GLSA 201310-19 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
CVE-2015-4376
Cross-site scripting XSS vulnerability in the Profile2 Privacy module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer Profile2 Privacy Levels" permission to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-4376
The CVE-2015-4376 entry affects the Drupal Profile2 Privacy module (7.x-1.x) prior to 7.x-1.5. The vulnerability is an XSS flaw due to insufficient sanitization in the module, exploitable by remote authenticated users who have the Administer Profile2 Privacy Levels permission. The vectors are not...
SA-CONTRIB-2015-080 - Profile2 Privacy - Cross Site Scripting (XSS)
Profile2 Privacy module enables you to show or hide parts of a profile2 entity based on pre-configured field sets with a title and description. The module doesn't sufficiently sanitize user supplied text in some pages, thereby exposing a Cross Site Scripting vulnerability. This vulnerability is...
CVE-2014-4376
CVE-2014-4376 affects Apple OS X, specifically IOKit in IOAcceleratorFamily prior to OS X 10.9.5. The issue is a kernel NULL pointer dereference that can allow an attacker to execute arbitrary code in a privileged context or cause a denial of service by passing crafted API arguments to IOKit/IOAc...
[ MDVSA-2014:063 ] x2goserver
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:063 http://www.mandriva.com/en/support/security/ Package : x2goserver Date : March 17, 2014 Affected: Business Server 1.0 Problem Description: Updated x2goserver package fixes security vulnerability: A...
Mandriva Linux Security Advisory : x2goserver (MDVSA-2014:063)
Updated x2goserver package fixes security vulnerability : A vulnerability in x2goserver before 4.0.0.2 in the setgid wrapper x2gosqlitewrapper.c, which does not hardcode an internal path to x2gosqlitewrapper.pl, allowing a remote attacker to change that path. A remote attacker may be able to...
Updated x2goserver package fixes security vulnerability
A vulnerability in x2goserver before 4.0.0.2 in the setgid wrapper x2gosqlitewrapper.c, which does not hardcode an internal path to x2gosqlitewrapper.pl, allowing a remote attacker to change that path. A remote attacker may be able to execute arbitrary code with the privileges of the user running...
CVE-2013-4376
CVE-2013-4376 affects X2Go Server prior to 4.0.0.2 via the setgid wrapper x2gosqlitewrapper.c, which does not hardcode an internal path to x2gosqlitewrapper.pl, enabling a remote attacker to execute arbitrary code with the server process user privileges. Public advisories (Mageia/MGASA, Mandriva ...
CVE-2011-4376
CVE-2011-4376 is rejected and does not represent an active vulnerability entry.
SuSE 11 Security Update : wireshark (SAT Patch Number 2082)
This update of wireshark fixes : - Remote attackers could potentially trigger a buffer overflow in the Daintree SNA file parser. CVE-2009-4376 - Specially crafted packets could cause the SMB and SMB2 dissector to crash wireshark. CVE-2009-4377 - Unspecified vulnerability in the Infiniband dissect...
RealNetworks RealPlayer Multiple Vulnerabilities (Dec 2010) - Linux
RealPlayer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-4376
CVE-2010-4376 describes a heap-based buffer overflow in RealNetworks RealPlayer 11.x (Windows, Mac, Linux) and RealPlayer SP 1.x, triggered by a large Screen Width value in the GIF87a Screen Descriptor of an RTSP stream. This allows remote code execution. Public sources in the provided documents ...
RealPlayer for Windows < Build 12.0.1.609 Multiple Vulnerabilities
According to its build number, the installed version of RealPlayer on the remote Windows host is affected by multiple vulnerabilities: - An error in the 'Cook' codec initialization function and can be used to access uninitialized memory. CVE-2010-0121 - Freed pointer access in the handling of the...
Real Networks RealPlayer < 14.0.1.609 (Build 12.0.1.609) Multiple Vulnerabilities
Binary data 5709.prm...
openSUSE Security Update : wireshark (wireshark-1900)
This update of wireshark fixes : - CVE-2009-4376: Remote attackers could potentially trigger a buffer overflow in the Daintree SNA file parser. - CVE-2009-4377: Specially crafted packets could cause the SMB and SMB2 dissector to crash wireshark. - CVE-2009-2563: Unspecified vulnerability in the...
Mandriva Update for wireshark MDVSA-2010:016 (wireshark)
Check for the Version of wireshark OpenVAS Vulnerability Test Mandriva Update for wireshark MDVSA-2010:016 wireshark Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...