CVE-2016-4414

CVE-2016-4414 affects Quassel before 0.12.4, where the onReadyRead function in core/coreauthhandler.cpp is vulnerable. An attacker can trigger a denial of service (NULL pointer dereference and crash) by sending invalid handshake data. Public references in NVD and related advisories confirm the vu...

openSUSE Security Update : quassel (openSUSE-2016-589)

This update for quassel fixes the following issues : - CVE-2016-4414: Denial of service vulnerability by unauthenticated clients boo978002 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Fedora 24 : quassel-0.12.4-1.fc24 (2016-bf916bcc04)

Security fix for CVE-2016-4414, Update to latest upstream quassel release, 0.12.4 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 23 : quassel-0.12.4-1.fc23 (2016-42f30d76a0)

Security fix for CVE-2016-4414, Update to latest upstream quassel release, 0.12.4 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Mageia: Security Advisory (MGASA-2016-0166)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 22 : quassel-0.12.4-1.fc22 (2016-0431acaa78)

Security fix for CVE-2016-4414, Update to latest upstream quassel release, 0.12.4 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Updated quassel packages fix CVE-2016-4414

Updated quassel packages fix security vulnerability: It was found that quasselcore is vulnerable to a denial of service attack by unauthenticated clients. The protocol negotiation did not take into account lack of a match in handshake data, in which case PeerFactory::createPeer returns a nullptr,...

MGASA-2016-0166 Updated quassel packages fix CVE-2016-4414

Updated quassel packages fix security vulnerability: It was found that quasselcore is vulnerable to a denial of service attack by unauthenticated clients. The protocol negotiation did not take into account lack of a match in handshake data, in which case PeerFactory::createPeer returns a nullptr,...

quassel-core: denial of service

CVE-2016-4414 denial of service It was found that quasselcore is vulnerable to a denial of service attack by unauthenticated clients. The protocol negotiation did not take into account lack of a match, in which case PeerFactory::createPeer returns a nullptr, which is immediately dereferenced...

CVE-2015-4414

Directory traversal vulnerability in downloadaudio.php in the SE HTML5 Album Audio Player se-html5-album-audio-player plugin 1.1.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2015-4414

Directory traversal vulnerability in downloadaudio.php in the SE HTML5 Album Audio Player se-html5-album-audio-player plugin 1.1.0 and earlier for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2015-4414

The CVE-2015-4414 issue affects WordPress SE HTML5 Album Audio Player plugin versions up to 1.1.0. A directory traversal vulnerability exists in download_audio.php, allowing remote, unauthenticated attackers to read arbitrary server files by crafting a .. path in the file parameter. Root cause: i...

WordPress Plugin SE HTML5 Album Audio Player 1.1.0 - Directory Traversal

Title: Path Traversal vulnerability in Wordpress plugin se-html5-album-audio-player v1.1.0 Author: Larry W. Cashdollar, @larry0 Date: 2015-06-06 Advisory: http://www.vapid.dhs.org/advisory.php?v=124 Download Site: https://wordpress.org/plugins/se-html5-album-audio-player/ Vendor:...

CVE-2015-4414

creationtimestamp| type| source ---|---|--- 2015-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37274...

CVE-2014-4414

WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and...

CVE-2014-4414

CVE-2014-4414 affects WebKit as used in Apple iOS before 8 and Apple TV before 7. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website due to memory corruption in WebKit. This is a WebKit-specific issue distinct from other WebKit C...

RHEL 5 : MRG (RHSA-2013:1851)

An updated Grid component package that fixes multiple security issues is now available for Red Hat Enterprise MRG 2.4 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores,...

openSUSE Security Update : mariadb (openSUSE-SU-2013:0014-1)

MariaDB was updated to 5.2.13. - Release notes: http://kb.askmonty.org/v/mariadb-5213-release-notes - Changelog: http://kb.askmonty.org/v/mariadb-5213-changelog %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

CVE-2013-4414

Cross-site scripting XSS vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to inject arbitrary web script or HTML via the "Max allowance" field in the "Set limit" form...

CVE-2013-4414

CVE-2013-4414 affects Red Hat Enterprise MRG Grid 2.4, specifically the cumin web interface. The vulnerability arises because input from the Max allowance field in the Set limit form is not properly escaped, allowing remote attackers to inject arbitrary web script or HTML (XSS). The issue is miti...