[SECURITY] [DSA 3377-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3377-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 24, 2015 https://www.debian.org/security/faq -...

CVE-2015-4879

CVE-2015-4879 is an unspecified vulnerability in Oracle MySQL Server (affecting 5.5.44 and earlier, and 5.6.25 and earlier) that allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to DML. The IBM Guardium advisory (CVE-2015-4879) documents...

RHEL 5 : mysql55-mysql (RHSA-2015:1628)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1628 advisory. - mysql: unspecified vulnerability related to Server:InnoDB:DML CPU Jan 2015 CVE-2014-6568 - mysql: unspecified vulnerability related to...

Fedora Update for seamonkey FEDORA-2015-4879

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Remote Code Execution in Popular Hikvision Surveillance DVR

A number Hikvision digital video recorders contain vulnerabilities that an attacker could remotely exploit in order to gain full control of those devices. According to a report written by the security firm Rapid7, Hikvision’s DVRs contain three fairly typical buffer overflows in the request...

Fedora Update for openssl FEDORA-2014-4879

Check for the Version of openssl OpenVAS Vulnerability Test Fedora Update for openssl FEDORA-2014-4879 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Multiple Vulnerabilities in BigTree CMS

Advisory ID: HTB23165 Product: BigTree CMS Vendor: BigTree CMS Vulnerable Versions: 4.0 RC2 and probably prior Tested Version: 4.0 RC2 Vendor Notification: July 17, 2013 Vendor Patch: July 17, 2013 Public Disclosure: August 7, 2013 Vulnerability Type: SQL Injection CWE-89, Cross-Site Scripting...

CVE-2013-4879

Vulnerability: CVE-2013-4879 affects BigTree CMS 4.0 RC2 and earlier, due to an SQL injection in the code path that processes input via PATH_INFO to index.php (affecting core/inc/bigtree/cms.php). The root cause is insufficient sanitization/validation of user-supplied data, enabling remote attack...

BigTree CMS 4.0 RC2 - Multiple Vulnerabilities

BigTree CMS version 4.0 RC2 suffers from cross site request forgery, cross site scripting, and remote SQL injection vulnerabilities. Vendor: BigTree CMS Vulnerable Versions: 4.0 RC2 and probably prior Tested Version: 4.0 RC2 Vendor Notification: July 17, 2013 Vendor Patch: July 17, 2013 Public...

BigTree CMS 4.0 RC2 - Multiple Vulnerabilities

Advisory ID: HTB23165 Product: BigTree CMS Vendor: BigTree CMS Vulnerable Versions: 4.0 RC2 and probably prior Tested Version: 4.0 RC2 Vendor Notification: July 17, 2013 Vendor Patch: July 17, 2013 Public Disclosure: August 7, 2013 Vulnerability Type: SQL Injection CWE-89, Cross-Site Scripting...

CVE-2013-4879

creationtimestamp| type| source ---|---|--- 2013-08-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27431...

CVE-2012-4879

The Linux Console on the WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC IPC devices has a default password of wago for the 1 root and 2 admin accounts, 3 a default password of user for the user account, and 4 a default password of guest for the guest account, which...

CVE-2012-4879

The CVE-2012-4879 entry concerns WAGO I/O System 758 series IPCs (758-870/874/875/876). The linked Red Hat and NVD records describe the issue as default credentials: wago for root/admin, user for the user account, and guest for the guest account, enabling remote login via TELNET/TCP sessions. The...

CVE-2011-4879

Siemens WinCC/HMI Web Server vulnerability CVE-2011-4879: the HMI web server (miniweb.exe) fails to properly handle URIs beginning with 0xfa, enabling remote memory reads or DoS via crafted POST requests. Affected products include WinCC flexible 2004–2008 (pre-SP3), WinCC V11 (TIA Portal) before ...

KLA10394 Multiple vulnerabilities in Siemens

Multiple critical vulnerabilities have been found in Siemens products. Malicious users can exploit these vulnerabilities to read & modify arbitrary files, cause denial of service, execute arbitrary code, bypass authentication, obtain access and inject arbitrary HTTP headers. Below is a complete...

CVE-2011-4879

creationtimestamp| type| source ---|---|--- 2011-11-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18166...

CVE-2010-4879

PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the inputfile parameter...

CVE-2010-4879

PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the inputfile parameter...

CVE-2010-4879

CVE-2010-4879 affects dompdf up to version 0.6.x: PHP remote file inclusion in dompdf.php via the input_file parameter allows remote attackers to execute arbitrary PHP code. The issue is publicly documented in Red Hat and FriendsOfPHP advisories; upstream fixes are in dompdf 0.7.0. Remediation: u...

Fedora Update for xorg-x11-server-utils FEDORA-2011-4879

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...